and its code is... well, it's not bad, so let's quantify it as good, or good enough

If "good enough" isn't actually good enough, why are you calling it that? Your entire argument hinges on high code quality not being high code quality. Like... yeah, of course bad code is going to lead to bad outcomes. That's literally the entire point he's trying to make: the tool doesn't matter, the result does.