I wonder how the baseline for 100% is established - are there (security relevant) software that you'd say are essentially free of vulnerabilities?
Nope! It's extremely unknowable.