This argument doesn't hold because paid cryptography libraries aren't any better and equally provide their code as-is.