Patching zero day vulns in open source software is still sketchy as f*ck. Building out in the open is cool until you need some privacy to "fix" things without alerting anyone. In the end, every project is just a social club.