I disagree. In software security 95% is not a win - it's an invitation for users to trust a system that they shouldn't be trusting.