[iso-8859-1]

"It's proprietary" is a fully legitimate pain point. It means that I can never fully trust that part of my toolbox, what if it has a bug that gets neglected by the developer or it gets abandoned. The open source ideology is not attractive just because of its ethics.

[cm2187]

But open source has its own history of major security flaws, particularly the last two years.

I would be curious to know what % of security flaws are discovered because exploited vs as a result of a code review.