The  &quot;many eyes makes all bugs shallow&quot; quote was never said in the context of security vulnerabilities, and I would argue that they are different in nature. Normally, a bug means that something that I want to work doesn&#x27;t. Then I can fix it or report it.<p>When the bug is a security vulnerability (e.g. Hertbleed), then everything work as it should, I can log into all the servers I have access to and all the functionality I want is there. The difference is that someone else can get access to my system or get access to information they are not supposed to. You don&#x27;t discover this by using the system, you have to actively be looking for vulnerabilities. This is quite different from other kinds of bugs.