Let's be real --- open source helps the bad guys too.
And the lax verification of contributors and lax review of their contributions is a potentially huge security hole just waiting to be exploited.