> How many insecurities are there going to be in software that doesn't connect to the internet or process input from untrusted users?
In principle there are ways this can be exploited, though I know the poster's application is likely a less interesting attack vector than uranium centrifuges (e.g., https://en.wikipedia.org/wiki/Stuxnet).
But there may still be user-facing bugs that would require fixing.
