In my experience "the community" cannot be trusted for security audits, as far as most FLOSS goes. In fact if a program can be "made secure" by yourself just by firewalling it properly, I'd be more inclined to trust that measure over any FLOSS community audit.

Having said that, the idea of running software I mistrust so much that I have to firewall it on my network is unacceptable.