Free and open source software is incompatible with (security) guarantees