[xerophyte12932]

> Open Source = more likely for attackers to find bugs, but less likely for bugs to persist. Don't need to trust the company's reputation for code quality.

But you need to trust the entire community not to insert bugs/backdoors and/or weed out such code. Not to mention Open Source contributors arguably have a lesser incentive than closed-source development being done by a company.

Ofc the above argument assumes contributors are allowed to make changes to the codebase, instead of just reviewing the code