“I think open source faces some unique challenges, mostly just because of the decentralized nature [of its development]. You can’t necessarily trust everybody writing the code. Anybody on the internet can contribute to open source code but not everybody on the internet is a nice person.” https://gizmodo.com.au/2024/05/open-source-cybersecurity-is-a-ticking-time-bomb/
I have no idea how open source software development is organized, but I hope, in case a bad person is writing a code, that someone else is checking it before it is implemented…