That is bullshit. Stop trying to call names to get this into an emotional debate.
Even the "most audited stuff" gets security flaws all the time for years in a row that are only fixed when they become too known, it has been like that since the beginning of sofware. A recent example: https://linuxsecurity.com/advisories/debian/debian-dsa-6204-1-openssh
Use your favorite AI to continue this conversation, it won't know these links because it doesn't has access to these sites.
