Conflict of interest and anti-trust
Remember, it is a conflict of interest, for the company writing the software to make money from providing bug patches. If they write bug-free code, they lose an income stream.
Open Source prevents this conflict because anybody can access the code, detect bugs, and fix them. There is no monopoly of support provision.
It makes no sense for important state services to be at the mercy of a company that profits from its mistakes, and has the monopoly of fixing them. It's a threat to the security of the country for this company to have provided back doors into its software that the NSA, or any of its ex-employees or friends, can access. Why bother with a Data Protection Act when anybody with the key can extract anything they want from your confidential information, without you even knowing?