content: Exactly this. Everyone who thinks open source is some kind of silver bullet needs to spend some time reading the Underhanded C Code Contest entries. Genuine mistakes can be subtle as hell and go undetected in OSS for years (just look up kernel bugs). When someone with world-class skills deliberately tries to be sneaky, it's damn near impossible to spot.