What you’re describing is possible in certain circumstances , but it would expose the companies to an insane amount of liability. Also, open source software can introduce vulnerabilities that could be exploited to do the same exact thing. Open source software is not inherently more secure. Remember that time malware was introduced to the Linux kernel directly as a research project?