With a closed-source app, it takes very specific expertise---which even many professional software developers don't have---to be able to understand exactly what that app is doing. Even for people with that expertise, it takes a lot of time and effort to fully analyze a closed-source app. It's much easier to understand what an open-source app is doing.