“I would not trust any open-source code or product which I did not personally review or scan,” he said. “Integrating code into your product without knowing its state of quality or exposure to vulnerabilities is dangerous to say the least.
Does this mean he would never use proprietary software? You cannot scan the code if it's not available.