If you build something open source and it gets incredibly popular, security researchers will also probably come to you. This creates its own problems, of course

If you build something open source and it gets incredibly popular, security researchers will also probably come to you. This creates its own problems, of course. (Can't have problems without PR.)