I think it was the great Capers Jones who first pointed out that the purpose of testing isn't to show that what you have built is right, it is to identify where it isn't right. You want to catch things like the Little Bobby Tables exploit: https://xkcd.com/327/