Defect-free software does not exist.
At the time the Sendmail program had a very poor reputation with respect to security, with four root vulnerabilities per year for two successive years.
When I write software, I know that it will fail, either due to my own mistake, or due to some other cause.