Working (!) source code should absolutely be required BUT there should also be a requirement that it not be unnecessarily complicated or obfuscated. Otherwise malicious compliance would be common.
The source code provides the Written Description and Enablement requirements.