It's not misleading at all, it's letting the IT manager draw his own inferences. If he's too stupid to make the association between Microsoft profitting from its closed source, and distributors really being the only ones who can make some sort of
realistic guarantee of the security of a closed source project... well, then he probably shouldn't be running the IT staff, ne?
Although, to your credit, way to pounce on the literal interpretation!