That old classic chestnut of lies by Closed Source companies intent on making CIOs believe Open Source is not secure...

Arguably vulnerabilities would be more likely to be found and disclosed if the code was open source.

That’s not typically how these exploits are developed.