[embolism]

Open source is not a magic security bullet.

It does allow many eyes to inspect source code - which is certainly important in developing cryptographic software.

However it currently does nothing to ensure the timely delivery of patches to consumers. Also, usability of open source security solutions is terrible, and unless people understand cryptographic signing, and the web of trust, and build all their software themselves they have no guarantee that their software isn't compromised.