You are taking the quality of the code on pure faith when you buy a commercial package. You may be familiar with the SEI software quality model. No commercial software company has reached higher than level 1 on their scale. Software you develop internally is usually of higher quality if you have a decent staff and don't rush things too much. I'm sure your software can be of higher quality than software you purchase.
Risk is a relative concept.
When one says something is too risky they are making a relative judgment against some alternative they feel is less so. Often however that less risky alternative is not in reality any less prone to adverse events. What they really are reacting to is newness. It is natural to conclude that anything that is less known is riskier. It's important to be realistic about the inherent risks involved in doing things the old way.