Could you just claim that "this software is intentionally defective and full of security vulnerabilities, was made as a training software for pentesting", so th

Could you just claim that "this software is intentionally defective and full of security vulnerabilities, was made as a training software for pentesting", so that (and good luck proving that) only if it's proven safe you can call it "defective"?