> Can be reviewed doesn't mean has been reviewed.
Well, you can't blame them if nobody bothers to review their code.
> Not the side, that every evil minded person can look through the source code, abuse it, before we were able to counter/fix etc it.
The same can be said of any other Free Software/Open source project. the Linux kernel and Apache are prime examples.