What consensus? All I'm seeing are assumptions that being able to read code easily means it is more secure. Someone can easily write an open-source project that

What consensus? All I'm seeing are assumptions that being able to read code easily means it is more secure. Someone can easily write an open-source project that looks like it is a secure project but can easily be misused to do bad things without people catching it in the act. Look at Heartbleed and how lack of funding led to a horrible bug being missed. There has been other open-source projects hit by similar issues. Just as there are closed-source projects being hit with their own issues. The nature of the code license does not, and I stress this strongly, lead to anything being more secure than other solutions. A properly funded and talented team of developers working on an open source project is just as secure as a properly funded and talented team of developers working on a closed source project.