Yes their code remained viewable, but the incentive to inspect it is much lower. Had they remained truly open source, then a downstream project like
Foundation (nprofile…t77k) might have found the bug years ago, if they were taking upstream commits. In a way, Cold Card shot themselves in the foot by restricting their code

