Agree, I think the fear of someone finding a vulnerability and the original author being held accountable is high enough for almost nobody to open source their code.