Why does it always have to be all or nothing? Is your codebase 100% covered by unit tests?
You don't have to make sure all the angles of your house are perfect right angles, but there's probably a couple that really have to be. Formally verify those and live with manageable imperfection for the rest.