Until it turns out your server is vulnerable to something like *sshole which you had no way to know about or defend against without formally verifying the whole OS.