you can have both sloppy programmers and ill intent.
You can also have very complex systems with a lot of input which a person not being a God could not anticipate.
As projects become more complicated the odds of unforeseen uses and such occur.
That is neither ill intent or sloppy programmers.
You just adapt and adjust your code accordingly.
True.