I've found that big projects need refactoring without replacement, as Joel says. Bind and sudo and even sendmail have value in this world (the latter for versatility) that cannot be easily replicated without massive cost and decades of maintenance amid real attacks.

But yeah, trivial stuff can be rewritten and exhaustively tested at occasionally a cheaper cost where it can provide value to the enterprise that will one day out-balance its rebuild cost.