Clearly this is an argument against open source code, which has no way to protect itself against this kind of threat..

The Reg should add a dead penguin picture.

Anyway, as many people already said there, hackers and security professionnals are doing this for ages. Reducing the number of bugs and vulnerabilities in closed and open source, increasing the speed at which fixes are released AND applied, looks the only sensible approach.