Yes… very true… but also don’t forget that FOSS does not automatically imply good secure software… if the software is not well known and so the code is not reviewed by good coders… there is almost zero pluses that it is FOSS…