Just to state the obvious for the less tech-literate out there: an open source one could do the same.

It’s just very easy for anyone to find out by inspecting the code, that’s why no developer in their right mind would pull such a move.