To my knowledge there are currently no known exploits. It's more a matter of risk management: newer codebases are less secure because we had less time to find b

To my knowledge there are currently no known exploits. It's more a matter of risk management: newer codebases are less secure because we had less time to find bugs and spread best practices. That problem is amplified for larger codebases (but diminished by a more active developer community).