Defacto secure doesn't mean "has no buffer overflows." It just means it's already a prevalent security risk outside of your system.