At the end of the day if the source is closed we can't validate their claims that "you have to sign in order for your keys to leave the device". Sooooo, release the source code, aka put your money where your mouth is.