> That would be an improvement over nothing, but closed-source means that the game is still going to die as soon as someone finds a security vulnerability (or even just a gameplay glitch) that can't be feasibly patched.

No, it just means you need need to limit players to a trusted community - but that is usually how things work anyway because malicious players don't need any exploits to make a game unfun.