Why Is Open Source Use Risky?