Open over closed.
Research code should be open by default. When the code behind a result is closed, readers have to take the result on trust, and trust is not how science is supposed to work. Openness lets others check the method, reuse it and build on it. There are real reasons to restrict code: patient privacy, security, legal limits, third-party licenses. Those reasons should be stated, not assumed. Where code cannot be fully open, share what you can, describe what you cannot, and explain why. Closed should be a decision with a reason, never the default that nobody questioned.