And you are correct also about the nature of the non-fun-parts code, though that's less a concern in non-security-critical infrastructure and may occasionally benefit from professional-quality rewrites and audits.

And this would be why I have, up until very recently, stayed as far from dev work as possible: ops for life! ;-P