The future of open source is still much in flux
technologyreview.com
technologyreview.com
But closed source vulnerabilities are hidden from the public eye. Often for decades. Despite the fact that non FOSS software should be seen and treated as 'malware' as RMS refers to closed source solutions.