Without access to the code any development is not just impossible but useless. And do not sell it as a community coin when it is definitely not. There is a limited company on the Seychelles staying behind it all, this is far from being a community coin.
For example, foreigner can a start a business in Singapore for $700, this includes company registration plus other things and benefits included. Does it make all blockchain companies registered in Singapore an unsuccessful scam?
Have you missed that?
https://blog.xtrabytes.global/xtrabytes/xby-community/oh-canada-the-latest-company-achievements/Some very trusted devs have an access to the code already, as far as I know, and for some devs an access will be granted after NDA.
And I know all this simply by following XBY Discord channel. Why you don't follow? Why you only spreding missinformation?