What are the limitations of code coverage as a quality metric?