Being closed source doesn’t mean you are “not exposed to attackers”. If you have another reason like commercial, just say it.