I'd say you're compleatly right there, but the old code hasn't been rewritten for a reason it's been in the public domain for a long time and no cost worthy problems have been associated to it, so even though the coding practices applied where bad it stands to reason that it doesn't need to be rewritten until someone finds an exploit or it breaks something.