I get the impression they're only counting code outside the standard library, in which case tons of useful programs are fully safe.