How much worth is a secure software if it quickly becomes outdated and thus useless? (at least in its original, secure form) Qmail is an example of how to succ

How much worth is a secure software if it quickly becomes outdated and thus useless? (at least in its original, secure form) Qmail is an example of how to success in security, but then fail another way. DJB never reviewed contributed features, or reimplemented them the "right/secure way". There was absolutely no plan to evolve Qmail, so it was unable to fit future requirements. This catastrophic project management literally provoked forks and patches. People had to modify the original Qmail to get even basic features such as SMTP authentiation or integration with spam scanners. Many patches of questionable quality are flying around, and no official next version of qmail. So to be fair, we should count the bugs in the Qmail forks (e.g. qmail-ng), because these are the versions that are actually used.