9 Critics of open source argue that access to source code makes it easier for attackers to identify vulnerabilities. The problem with this argument is that attackers seem to be able to find vulnerabilities in proprietary software about as well as they do in open source software. 11 Open source critics also argue that open source can lead to a false sense of security. They say that just because the source code is available doesn't guarantee that anyone is reading it. Nor does it mean that all the bugs have been found and fixed.
Many users install and use open source software without ever looking at the code.
They assume someone else has already scanned it for possible vulnerabilities. Undetected bugs have lingered in some popular open source packages for years. This is a legitimate concern. Critics of open source also point out that the average user may not be competent to inspect source code and identify vulnerabilities. Particularly in the case of large, complex software packages, this can be a real concern.