Regarding the need to review and audit all changes, it doesn't matter whether it is open source or closed source. I think the idea is, that various car makers collaborate, not necessarily patches from outside of those organizations.