It could have happened to any site that relied on an external authority ("trusted professionals") rather than actually doing real testing. There's a world of difference between "I'm going to use this code because the guy who wrote it says it's good" and "I'm going to use this code because I've thoroughly tested it and it works".

TradeFortress was a "trusted professional", but I didn't trust him to handle client funds without first securing collateral.

I always felt like people were trusting me to look after their coins. I wasn't willing to delegate that trust to random third parties. I feel that doing so would have been an abuse of their trust. It's a little worrying that you don't see it the same way.