They may be closed source, but they talk in depth on how their technical implementation and architecture works in a white paper you can find on their site. They also undergo regular 3rd party audits and publish the results. They've never been hacked or had customer data compromised.

Open Source doesn't mean better security or even that bugs will always get caught before being exploited.