I&#x27;m a big fan of using open source software to build a business on - particularly BSD&#x2F;MIT&#x2F;Apache (aka &quot;permissive&quot;) licenses - but the idea that &quot;Open Source === Audited&quot; is laughable.<p>How many <i>huge</i> bugs have been discovered in very widely used open source libraries&#x2F;applications and identified as having affected the software for many <i>years</i>?<p>Would you be satisfied if Apple provided the option for NDA-sealed access to the source, allowing people&#x2F;researchers to view (but not redistribute) their stack?<p>Edit: fixed brain shart (extra word)