> 'with enough eyes all bugs are shallow'

This was always nonsense. It assumes that the eyes know what they're looking at. Most people don't know how to look at code and see attack paths.