They didn't open source their Windows and macOS clients, which are the most important pieces of the puzzle.

I was misled by the title of this submission. The Linux NordVPN client is now open source (https://github.com/NordSecurity/nordvpn-linux), but the Android, iOS, macOS, and Windows NordVPN clients are still closed source.