Being FOSS doesn't it make secure, but it doesn't make it more possible for people to actually test and secure it (people with less interests in it being seen as secure, but instead actually secure).