Remember the recent stories about how FOSS is inherently less secure than proprietary systems - and because of the xz exploit, which was infinitely more complex

Remember the recent stories about how FOSS is inherently less secure than proprietary systems - and because of the xz exploit, which was infinitely more complex? I'm trying to remember a FOSS system with a hardcoded, passwordless backdoor - it's a big world; there must be some. I almost expect a backdoor (though with a password!) in a consumer NAS. I don't knee-jerk reject proprietary solutions. And they might have an advantage if there was liability for this sort of thing. D-Link should be paying hefty fines for selling this obviously substandard, unprofessional crap to the public.