Closed source is worse; it's much harder to find backdoors or accidental bugs when you don't even have source code to work from.