yeah you know the "security" features like 2fa are closed source and who knows what else "to prevent theft" but even if there isn't anything malicious in there, it's a bit delusional to think people would want to run a closed source program to manage their money or assets.


the problem with open sourcing the 2fa isn't to prevent theft, it's that with it being open source it makes the 2fa pointless because the whole point of it is that there is a "secret" that "secret" is only suppose to be known by your secondary device, usually your phone. In this case though, the "secret" is derived from the password you use to decrypt the wallet meaning with the source being open, you can see how to compute that secret.

therefore if you know the wallet password, and how to compute the secret, you can compute the secret, produce yourself a new QR code and scan it and viola you have access to their 2fa now too!! so secure!!