Monero's additional complexity is definitely more attack surface. And considering we are trying for a major major upgrade this year, I'm a little freaked out. A little surprised we haven't seen a sudden "everybody needs to upgrade their nodes right fucking now" from the devs TBH. But maybe it's actually solid. I know they've been hitting it with the llms, and I'm sure the black hats have also. The vulnerabilities will continue until everybody fixes their shit.