Comment by williamstein

> This means that the model can support defensive cybersecurity work while still blocking vulnerability discovery in compiled binaries, which is more commonly used offensively.

Annoyingly, this is a concrete argument that open source software may be easier to attack.