I take issue with the strawman argument about everyone needing to look at the source. As long as the source is available, it only needs one person to notice a problem and sound the alarm, and then everyone else benefits. It's not a magic guarantee, but it does give the white hats a better chance to keep up with the black hats.