The US Military should red-team open source code

The Open Source Security Foundation recently proposed red-teaming 200 major open-source projects a year at a cost of roughly $40 million a year. For the military, that’s budget dust.

Seems like a no brainer. I wonder how easy it will be for US enemies such as North Korea, Iran, Russia, and China to tamper with the US military's software given that the US isn't actively maintaining the software it benefits from.

I hear a lot of arguments that OS is more secure then proprietary software because it the community vets the software and patches issues themselves...but is that really true when organizations like the US military utilize OS and don't contribute?

I find it incredibly concerning that the US military is using Open Source software and they aren't contributing to the security of it. They are instead letting companies and enthusiasts handle security on their own.

This doesn't make any sense. Google and Facebook each contribute to open source security and also pay for bug bounties....why isn't the the US military - one of the largest employers in the world - doing the same?