Yes: because they've been tested extensively for over a decade for them, especially over the attack vectors exposed on web applications.