Being well-tested from the perspective of regular use is not quite the same as being well-tested from the perspective of defending against a hostile actor.