This principle also works for security vulnerabilities in open source software, by the way. That is, the responsibility for preventing security exploits rests o

This principle also works for security vulnerabilities in open source software, by the way. That is, the responsibility for preventing security exploits rests on the party who operates or deploys the software. Don't want the "risk" of open source? Feel free to use something more expensive. But it might be cheaper to pay the original developer for patches.