I really can.
Bytecode is basically the same as source. Decompiled binaries are harder to read, but there are oodles of professionals who are very skilled at reading decompiled code. The actual structure of the program itself plays (to me) a much bigger role in the auditability of a system.
Open source doesn't make things automatically secure, but one can't argue that it isn't much easier to inspect.