Is there a downside for “all software open source”?

Taking Lemmy as an example, if someone writes software for bot detection, CSAM detection, or other similar tools, there could be a downside to making those open source. It could be equivalent to handing malicious actors a guide to circumventing those tools.