Are open-source projects more or less secure than proprietary ones?