I worked at a startup where the original code base was outsourced to cheap developers and was riddled with security vulnerabilities.

A complete rewrite made sense.