When a proprietary vendor declines to patch, customers have no recourse that touches the code. Open source breaks this structural dependency — not perfectly, but fundamentally. The agency difference is a material security risk factor that belongs in every platform procurement decision.