I think there should be a bounty for revealing the truth
FOSS still has a lot of vulnerabilities, but it has also caught a lot of vulnerabilities and more people know what to look for. Perhaps this is why there is so much resistance to sci-hub, because there are so many compromised editors and academics who risk exposure?