Having an order of magnitude (maybe two) fewer lines of code goes a long way to having fewer vulnerabilities. Given the longer and more rigid development cycle

Having an order of magnitude (maybe two) fewer lines of code goes a long way to having fewer vulnerabilities. Given the longer and more rigid development cycle and smaller attack surface, it's reasonable to think there are relatively few defects.