We have to be clear that closed source doesn't imply vulnerabilities. It just means it is hard to check. But we are also talking about one of the most researched devices w.r.t. security. If a backdoor is ever found, boy will there be hell to pay and I'm pretty sure Apple shares will take a really big hit. Especially as they've pivoted their marketing towards privacy.