From my (thankfully) very limited experience of interacting with oracle products, I assume it’s not very hard to find bugs in their stuff