"Just because something is closed source doesn't mean it's insecure" Yes it does. Closed source, to the extent it impairs audits, does mean something is insecu

"Just because something is closed source doesn't mean it's insecure" Yes it does. Closed source, to the extent it impairs audits, does mean something is insecure. It does not prove that the software is backdoored, otherwise compromised, or defective in any way - if that is what you meant, you're correct. But security means not only absence of these conditions, but also that you can verify that these conditions are absent. Security is relative. "Secure" is a short form of "high enough confidence". There can be a rational basis for high or low confidence, based on various factors, including testing and likely motives of the parties. Closed source itself is a bad factor. Collaboration with the USG is a very bad factor.