I think the idea is the increased security risk of potentially poorly maintained large body of code with a wide surface area.