it is always amusing to me that the majority of security success stories for the many-eyes principle are less "many eyes" and more "one irritated person who was annoyed enough by something to look".
@gsuberland open-source is all about making sure the irritated people can find the cause of their irritation and tell people about it instead of just raising a middle finger in the general direction of Redmond and drinking.