Making it opensource is no guarantee at all(if there could be any), for instance could be more dangerous: anyone could spot a security hole and take advantage of it without reporting it, there is no guarantee there would be a responsible disclosure.