Security researchers are very used to attacking binaries. The small bit of obscurity you get from hiding the source buys you very little security. And the most insecure internet-facing bits of code of the past decade - Flash and Acrobat PDF viewer - have always been closed source.