> Closed source is better because businesses have security teams checking for holes
As someone who worked in security teams for dozens of software companies of 20+ years I can only respond with:
No, they don't.
Security is considered a non-functional requirement (NFR) and as such enjoys little attention from business stakeholders.
Deeply frustrating, and there are exceptions, but this is the predominant attitude in business.