Question is how well peer-reviewed the code is before deployment. Facebook is handling a lot of personal data about their users. Security vulnerabilities may not harm Facebook as much as their users.