If the source for Systemd is readily available, shouldn't improvements to close security holes be easy to suggest?

Isn't that one of the tenants of open source?