> requires extra steps like open sourcing such that it is not an appealing vector for malware authors

So choosing FLOSS protects you from malware.

It can, sure.