Sure they do. Now how many of the discovered security bugs rely on any hardware problem?

I don’t claim it’s exhaustive in general, but it may well decimate a massively common class of problems, and eliminate some of them entirely.