What's surprising to me here is that people are still using qmail in a serious enough capacity to audit its code.

As a past qmail user of over a decade, that makes me happy.