I'm not saying closed source is a silver bullet.

I'm saying OSS also isn't a silver bullet, it doesn't find everything because there's not enough interest in doing this work.

The Log4j example alone, given it took 8 years, is enough to demonstrate that.

Everything is an illusion of trust, nothing is perfect; all we can do is try to align the interests of those working on projects with the interests of society — which is so hard that it's an entire field of study called "politics".