That may be true for popular projects with allot of contributers, but for small projects, being closed source in the age of LLMs is not a bad idea especially for server side code, it can be more secure simply because the bots don't have access to your code and can't do analysis on it.
A trained AI I believe is capable of reverse compiling from machine language back to the source code. Access to the source code is not necessary for them I think.
