Open source is great but it’s not a panacea. How much of it is actually audited? Some projects that the whole internet depend on are under-funded and under manned. I’m thinking about OpenSSL from a couple years ago.