It's not necessarily that the open source software never has...

It's not necessarily that the open source software never has security incidents. It's that there are far more people to deal with incidents. In the proprietary world, you're hoping really that the code never gets out into hackers' hands. It's really security by obscurity.