Making the source code open doesn't help unless you can flash the devices, since you have no guarantee the source code is what's on the devices.

Plus, if the backdoors are in hardware (say the hardware AES implementation has a small key scheduling "bug" or something) , not software, source code wouldn't help.