I don&#x27;t think most understand what (4) and (5) are, which is why you&#x27;re seeing the responses you&#x27;re seeing. Not being in that field, I had to re-read it a couple of times to understand what they meant.<p>I think OpenSSL&#x27;s past disproves many of the pro-OSS claims.<p>As most things, a blended approach is probably best. Defense in depth, layers of security, crunchy on the outside, still tough on the inside. If you put all your eggs in one basket, you&#x27;re gonna have a bad time, unless it was a very expensive, well-engineered basket.<p>And even then you might still have a bad time.