All software from ISC was/is littered with security vulnerabilities. BIND is in the same hall of shame as Sendmail.