What’s with this hit piece on open source software? Imagine thinking a proprietary black box is more secure than something you can audit and fix. Plus the statistics presented here are clearly cherry picked to make it look worse.
The entire idea of FOSS being a “hidden” risk is absolute bullshit. There’s nothing in the world LESS hidden.