They can be, but the most interesting parts (backend code, deployment confs) are not usually available. Reversing clients can help to understand a bit, but not with equal level.
On the other hand, any source code leak could be catastrophic
On the other hand, any source code leak could be catastrophic