Huh ?

Open source projects can be inherently insecure, outdated, or at risk of malicious takeover.

Because proprietary projects are immune to all that ? what is happening here ?