How the software is written isn't that important because the endpoints aren't secure. Their hardware and firmware isn't even secure enough.