[kube-system]

I don't think that's a relevant part of the consideration process. Open source is not a security strategy. Breaches happen at companies who open source their software too.

[cycloptic]

You are correct that it's not a security strategy by itself. But it can be part of a larger overall security strategy.