It's counterintuitive to think this way.

You want code to progress as well as possible with something as sensitive as self custody.

Their code not being open source deters developers from finding vulnerabilities...moreover they have a history of not paying bounties either.

You're looking at this from a stupid way IMHO, and you're not alone in this view so you feel comfortable....doesn't mean you/y'all aren't sipping dumbfuckjuice.