This assumes the base software and its updates are both secure. Considering the velocity of development and complexity of modern software I don't think that's ever true of general purpose devices.