Code is, but running application aren't "math". They have side effects - like uploading your private keys to hostile servers - which "math" conveniently ignores.