I wonder... Maybe in these wacky times FOSS might be more risky than the closed source (security though obscurity) for-profit garbage?
I keep thinking about the Mythos AI model for finding security issues and how only big shots (and backdoor folks) are getting access. Look at Firefox. It's open source. They still found GOBS of stuff.
Seems to me the little guys can't (or won't) use it. But the bad guys will. How many zero-days we're sitting on?

