> I suspect open source projects are better off than proprietary software - they already have many eyes on them

This has been disproven by the sordid history of OpenSSL. It was open source, critical, and full of holes.

https://www.mend.io/blog/how-the-heartbleed-vulnerability-sh...