Arguing that voting software should be a secret that only the anointed may possess is anti-democratic in the extreme.
Ideally, yes. But you can't have it both ways. Having closed software suddenly disclosed does indeed allow for bad actors to perform analysis and figure out '0 days' without the opportunity to patch.
Opening the source should have been done years ago, way before any elections took place. That allows time for responsible disclosure and any required patching.
I'd like to know what other measures were taken to secure the machines themselves. It doesn't matter how secure your system is, if the machine is physically compromised, all bets are off. I'd also like to know how the data is validated and collected once it's been tallied.