In some sense, I wonder if non-open-source is "safer" since LLMs can't mass scan the code for exploits.