Definitive post/answer/rule on WP containing eval() & base64_decode() functions?

Hello all. I’ve been focusing more and more on security and have been using Exploit Scanner to help me. When I ran ES, it listed a whole bunch of files that contained both eval() and base64_decode() functions, which can be bad.

I searched through the WP Forums and found this past post on the subject. It seems to say that the fact that these functions exist in your WP install does necessarily mean that they’re malicious but I’m wondering if there’s any more definitive discussion on the subject somewhere?

One thing’s for certain: I see the value in using as few plugins as possible in any future WP installations…quality not quantity.