Google and HackerOne put pressure on companies to fix cybersecurity vulnerabilities or risk having them exposed. Governments are beginning to view open source tools in a more positive light.