Comment by henearkr

> On the other hand, intentional vulnerability submission is an unique threat vector that OSS has, and which proprietary software doesn't.

Very fair point. Inside threat also exists in corporations, but it's probably harder.