When is Open Source not Enough?