It's free of security issues in the current context, that's the point. You depend on calling a standard library function that was found deficient (maybe it's i

It's free of security issues in the current context, that's the point. You depend on calling a standard library function that was found deficient (maybe it's impossible to make it secure) and deprecated. Now there is a new function you should call. Your software doesn't work anymore when the deprecated function is removed. Sure, you can say your software is feature complete but you have to specify the external environment it's supposed to run on. And THAT is always changing. You're both right but looking at different timelines. Relevant: https://www.oreilly.com/library/view/software-engineering-at/9781492082781/ch01.html https://www.oreilly.com/library/view/software-engineering-at...