I can't believe we still have people out there buying this baby-brain idea of "If muh code is open than people will find vulns!!" This has been disproven for 20+ years catch up.

AI generated bullshit PRs are clearly the bigger issue in the OSS space.