that'r right,
i think everything can happen in real world ;)
in fact for an action there is an reaction,
that's mean we can not reach to pure secure software,
but we try to reach safer level,
for instance Obfuscator can complex your source  code from
other but deObfuscator can revers them. (this is not except)

'so there is nothing to decompile or reverse engineering'
that's incorrect, sorry my friend