Heartbleed is the only counter example anyone needs to know that open source isn’t perfect. Intelligence agencies were likely sucking up encrypted traffic because nobody was paying attention to the most commonly used TLS library in the world