Yeah, sorry, crappy writing skills. I tried to elaborate in a sibling comment: https://news.ycombinator.com/item?id=7518682.

I'm gradually growing aware that just having the sources be open is not enough to be hackable.