Most of those are not a problem with closed source per-se (closed source binaries you run yourself can still be inspected, monitored and even reversed). It's a problem with SaaS model. Even if you open-source everything, how can I know you're actually running the same code you've open-sourced? I can't. And since most SaaS businesses track users like there's no tomorrow, you get perfectly reasonable distrust by default.