How is Linux supposed to be a good example of a secure open source project? I'm not really convinced by Postgres either, software like that inherently exposes

How is Linux supposed to be a good example of a secure open source project? I'm not really convinced by Postgres either, software like that inherently exposes very little attack surface unless the attackers already have access. Nobody is interested in exploiting Postgres.