I call BS. We are talking FOSS here so there can be absolutely no security issue because it was produced by a large community of do-gooders who vetted all commits for us and this means that every bug gets caught within seconds of being committed.
It is a fact (not theory or guess) that only commercial, closed software has security flaws.
Well, it is a security flaw/hole until it's been plugged.
There were thousands of independent ISPs once, they extincted themselves because they lacked the vision to work together and instead died one by one. I had a ringside seat.
They went extinct because the cost of building the infrastructure to provide the broadband internet access that consumers now demanded. It fell on king telecom to build that out. Even with the number of ISPs that you pull out of the air, I doubt they could collectively come up with the 100s of millions necessary to make this happen. Government helped the big boys make it happen and also created regulatory nightmares to ensure that the telecom industry is an oligarchy.