[tvaughan]

Point 3 is the key. Code coverage should only be measured by tests that only use the “external API.”

[sixstringtheory]

Brilliant distillation of this insight, I've never heard it put in those words before but it's perfect. It cuts both ways too, if you have lots of tests but most of them aren't really exercising the external API, then you're worse off.