I agree with you 100%. However, I think one of the aspects of "bad" software that is misunderstood is the increased risk of catastrophic failure. Two applications might have no perceivable difference from the user perspective. But one was built to withstand attack or corruption of the database, and the other was not.