I agree that this is a bigger issue, but only IF you want to change the code. My comment was more in the direction of "the project is done, deployed, and will

I agree that this is a bigger issue, but only IF you want to change the code. My comment was more in the direction of "the project is done, deployed, and will not change anymore". Somehow software seem to be subject to weathering over time. And what seemed like a secure piece of software can become insecure over night, when someone is fuzzing it and publishes a PoC.