If Apple and Google can’t even find all the vulnerabilities in their libs, how on earth would a scrappy team of a few devs Perhaps a few devs have nowhere near

If Apple and Google can’t even find all the vulnerabilities in their libs, how on earth would a scrappy team of a few devs Perhaps a few devs have nowhere near the required escape velocity to create vulnerabilities before they can be fixed, nor the pressure of PMs to ship substandard code?