A different way to frame this would be that those bugs would never be surfaced or exploited if the software were proprietary.