[jrockway]

should raise questions about the rest of the codebase (i.e. the defects which are yet to be found)

It has.

[tptacek]

By who? Cite someone who matters.