But at least you have a development history with open source. If there's a bug/vulnerability, its origins can be investigated.