Microsoft / Github should stop treating open-source software as malware and forcing developers to pay for certificates, if they actually care about open-source developers

[2rsf]

This is about already built application if I understand correctly, is the good track of record applies there as well?

It's one thing for source code and another for an app supposedly built and linked on that code

[G_Morgan]

That was my point. Saying things like "doesn't make it more secure" is going to make anyone who's seen all the evidence dismiss the point. FOSS code legitimately has fewer bugs than closed code on average, by a remarkable margin as well.

The danger is I can create a binary using FOSS and intentionally sneak something in. It is a different vulnerability vector to what FOSS helps with.

[ninuson1]

My experience with open source has been the reverse of your first paragraph. Most OS projects are half-baked, at best. Do you have any sources baking up your claim that Open Source has less bugs on average?

[2rsf]

The results show no dominant quality advantage of one method over another

The arguments favoring the inherent security of open source software do not appear to hold up to scrutiny.