The price of using open source code for security

More than two-thirds of websites online rely on open source — free code for encryption. So who pays when the software gets hacked?