Sheer insanity. Mary is a moron and her app users are prime targets for hackers.

Just because the test coverage passes, doesn't mean the code doesn't do something nefarious behind the scenes.

If Mary doesn't review the code before release, she deserves the rapture her customers will bestow upon her when she finds out Josh was paid by a competitor to decimate her business.

It's not that I believe people are inherently evil, I just believe that you need to review every patch to make sure it does what it's supposed to do and no more.