Can you make a case for why this is so? Not everyone fails at security. Just because one person is working on the software and because that software is not open source does not mean that you will leave something in your software that can be exploited in a way that gives someone access to your database.