vBulletin is probably hundreds of thousands of lines of code. Nobody has time to "read the code" before installing it.