&gt;  Open sourcing would only help find non malicious bugs.<p>1. This isn&#x27;t exactly true; Yubico as a whole might be trustworthy but that doesn&#x27;t mean individuals within the company can&#x27;t slip in something that looks benign but breaks security, and slips past the other developers. Such vulnerabilities are documented even in open-source code[1].<p>2. Even non-malicious bugs can have security implications.<p>[1] <a href="http:&#x2F;&#x2F;www.securityfocus.com&#x2F;news&#x2F;7388" rel="nofollow">http:&#x2F;&#x2F;www.securityfocus.com&#x2F;news&#x2F;7388</a>