I think it's a double edged sword. Easier to for scammers to find exploits, but also easier for the good guys to find and fix them when you have a large developer base.