they rely on being closed source to survive penetration

M$ always has.

But even open source relied a great deal on the volume and complexity of their code base to survive penetration... until now.