source code is open to inspection for security holes or backdoors
Yeah, right. This crypto stuff is so obscure that even with proper documentation and tech support it's not exactly easy to drive ... nobody but a serious mathematician (which doesn't include me, I gave up after two years at Cambridge) has the remotest chance of validating the source code.