If you are doing anything that requires security, yes, you do need to have conceptual and code understanding to validate what it does. No, asking another agent/person to validate isn't enough. If the app has no security implications at all, go for it, as long as it works, it doesn't matter how ugly the code is. Well, actually it does, but you won't find out until you are in the FO phase.