Do people in mission critical systems (like life threatening) write code from scratch all the time without using any external dependencies? I'm sure they don't

Do people in mission critical systems (like life threatening) write code from scratch all the time without using any external dependencies? I'm sure they don't reinvent encryption. I'd like to know how they audit their system and the threshold of saying it is adequately secure.