I don't think having a exploitable kernel counts as being 'open' by any measure. I cannot understand how people are ignoring the security side of this.