And how many audits has the Linux kernel had?  Or tcpdump?  Or Apache?  How many of those projects have created their own secure functions, which have propagated to other projects?  How many GNU daemons are privsepped or chrooted?  It's not point of view when it's verifiable, backed up fact.  It may just make everyone else look like slackers, but that doesn't negate it's validity.