Its a double edged sword of course, but for the financial sector the money saved on open source would be peanuts in the grand scheme of things.

A proprietary CMS may very well be holed like a swiss cheese, but it will not be as obvious / easy to find the holes when you can't look at the source code, you are basically left with fuzzers and manual/bruteforcing injection as your only viably point of entry.