[n4r9]

At least with free software there is the hope that malicious code will get picked up on by someone with an interest in reading the source, who would then make that functionality known to others.

[krapp]

To be fair, that hope exists with proprietary software as well, it's just that the end user is excluded from the set of eyes watching the code.