When Security Is Treated Like a Label, the System Already Lost

The real divide is not open versus closed code, but whether a platform is built and governed well enough to resist abuse in practice.