Exactly! I'm considering a small project in the future, and I'd make it open source _mainly_ for a security point of view. The kind of software in particular would benefit the users massively if they can read the code, and even self-host for the most paranoid (with a fee and a very restrictive license?). Sure, it'd not be in the "open source" space and I would personally not market it as such, but while it's way better than not having access to the code I know if it ends up in HN comments like the one you mention will be plenty.