"Open source is supposed to be the unsafe option because everyone can see the code."

Really?