Now you are changing words or read it too quick. I never said I. We as in anybody. Again another strawman second sentence. How do you think the researcher found the vulner for xz. He noticean tiny slow down and started scrutinizing code. Closed source is a false sense of security by obscurity. Open source means anyone can scrutinize the code.

Also we deal with enough proprietary software at work to get inside TSBs. Much of proprietary code also is built on open source pieces, so if your troll argument is opensource is bad, then proprietary is also bad on top of that.