[usr1106]

Random web search: https://ithemes.com/blog/security-vs-security-through-obscur... (And that points to NIST)

Nobody said that open source has no security bugs. No software that does something useful is bug-free.