I'm glad someone with some authority is saying this. I've been saying it for awhile. "With enough eyes all bugs are shallow" assumes "enough eyes". It's "begging the question" in the tradition sense of the phrase. Most users just compile the source - if they ever even touch it - and run the app. Most developers are just interested in adding features and refactoring. So who's looking for bugs exactly? And when bugs are reported, no one wants to do the work. They're closed as the infamous EWONTFIX, or they're blamed on upstream, or they're "scheduled to be fixed in v6" (while the project is on v2).
Oh.. and don't forget when bug reports get closed because the dev's say "this has received no action".
I see this on github all the time. The team finds an old bug report and closes it because it was reported months or years earlier. I mean nothing was fixed, but the reporter isn't super responsive.