It was a fear years ago when Quake was open sourced [1]. In Valve's case, the programmers probably had to audit all the source code in order to reduce possible exploits.

[1] http://www.bluesnews.com/cgi-bin/finger.pl?id=1&time=1999122...