On one hand, that seems like a sure way to get your product copied. On the other, they’d be totally nuts to run a cybersecurity product without the source code, right?

Seems like a situation where getting the interests to align is just very difficult.