[tristantio]

Not to mention with closed source, you risk a payload being sent obscurely in the future (how do you know it isn't collecting your password/keys/personal data for a push out in a future date? Or installing a botnet on your machine).