You can't totally trust your own code, either. Look at all the buffer overrun vulnerabilities that have been found over the years.