When I find one bug I assume it is likely repeated all over the code and I search it out. I have been burned enough times to not consider it a must.
Pain in information and they throw away a lot. It's a form of job security, and not a particularly benign kind.
Our job is to replace painful processes with code. If you can't do that you aren't fulfilling the basic premise of your profession.