Transparency requires architectural sacrifice

It's actually really hard from an end perspective to actually open source the actual algorithm that's running on the actual data. Because the way large-scale services like this are usually architected does not naturally lend itself to being run as a script by someone who's downloaded a TSV.

One of the big challenges that we have as a very open platform is we have this open plugin and theme architecture... However, many of these plugins and themes don't have the same sort of robust security and review process that core has.

We actually look for agreement from people who have disagreed in the past. And what we see is when people actually have that sort of surprising agreement, that's what makes the notes so neutral and accurate and well-written, really, overall.

I can't wait for more automated scanning there, and I think that could vastly upgrade the security of open source.