> (as if that would even matter, as I've discovered that no one actually ever seems to look at open-source code)

I _really_ wish our company would open-source the code just as a way to make the team feel better and hold ourselves to a higher standard. I know no one will actually read it unless they're trying to find a vulnerability - and that would only improve the product! But even with a restrictive license the company is concerned about "trade secret"/"intellectual property" stuff.

Personally I feel like if we figured out some tricky problem other people have then we have an ethical duty to share it with the community