Remember that there are other types of vulnerabilities too. If there are less of them in old code then it may make up for more memory issues.