The only time we hear about bugs with non OS software is when there is a masssive breach, FB initially reveals it only affects a small number of people, a few weeks later quietly revised that to a few 10s of million, and then a couple of months later buried somewhere that it was actually hundreds of millions of users affected.