Depends on the project and how thoroughly requirements, tests and auditing are specified and performed. But yes, in many cases such as many mobile apps they are just hacked on and magic happens. We even have a word for it, hacking.