This is totally context dependent. If the code is for controlling a nuclear power plant or security for thousands of customers then the core may need to be rob

This is totally context dependent. If the code is for controlling a nuclear power plant or security for thousands of customers then the core may need to be robust or the enterprise will be doomed. If the code is handling some basic business processes just a bit more reliably and efficiently than some existing but rotted code base then there may be enormously wide bounds for code quality. And this isn't just startups or side issues. I don't know anyone who has looked seriously at OpenSSL without being completely horrified.