If there's one thing the internet has taught me, there is no such thing as ironclad code. OpenBSD still has security vulnerabilities, and I highly doubt Lulu's security chops are as good.

That said, I'm not trying to doubt the skill of Lulu's employees. Just warning that vulnerabilities are always a possibility.