That's an incredibly low bar. All you have to do to meet is is not actively look for security vulnerabilities in your products.