[Wlug] Open source = security

Hi, During a discussion with an application architect, while trouble shooting SQL Servers "security" behavior, he asked how an application can be more secure when anyone can view the security related code. I thought this was self evident, but I guess it is not. I was wondering how others would answer this question? Thanks, Mike