Yup. It is simply amazing how many things I see devs push out that hard code badness (such as php ip2long, as an example). Intrusion detection that only will correctly resolve and send IPv4 to automatic firewall rules. Interfaces that truncate IPv6 addresses so information is lost. Who knows how many security problems are potentially added by this code that expects one thing and can get something else.