His point (I think) is that white-hat security experts don't have access to the Windows source.

Pretty much my point.

Everyone who could possibly help has open source access to *nix code.

Not everyone who could possibly help has access to Windows code.