I mean, by definition, open source means that the source code is available and therefore _open_ to scrutiny. Regardless of how it is distributed.

Right. But what is the problem?

* Someone lols at code. Answer: ignore them.

* Someone sees your vulns. Answer: someone is already trying to hack you anyway.