You have a valid point and open-sourcing definitely creates known risks we could enumerate without too much trouble.

If open-source were part of your mission then you would have to treat those risks like all the other risks you assume by providing your service or doing business at all.

If not, then I agree that closed-sourcing looks more attractive in most cases.