I personally do not think that the defence of any particular project is weaker, but the overall internet as a bunch of interdependencies is much weaker, as you never know which open source library in depths of code was compromized
If someone really knew what they were doing and had bad intentions, I fear we would never find out.