Open source doesn’t magically prevent exploits.
It does remove the black box 👀🛠️

Anyone can inspect the code.
Anyone can audit the fixes.
Anyone can learn from what happened.