2GET!
This question always makes me wonder too, how can one gain more security if everyone can see how the said security works? How can you guarantee that your contributors and volunteers aren't really saboteurs?