The source for AOSP. Individual Android devices have never been open source (minus some very few exceptions), and they have no obligation to do so as AOSP is Apache/permissively licensed.
Note that the demand for secrecy is primarily driven by device manufacturers, not Google. Manufacturers want to keep their "secret sauce" from their competitors.