Exactly. Also someone can only release parts of the source code of their software and still license it under a permissive license like MIT, BSD, Apache, CDDL, etc. enabling them to claim that their software is “open source”. And usually in that case the released source code just so happens to mostly be wrapper/glue code that calls out into closed source binaries which is where the actual magic happens.