If it's open source, the code will be visible and noticed. In a closed source environment, you could still have the exploit, but it'd be behind closed doors.