There’s certainly no question that DOS can be exploited, on the other hand DOS has fewer moving parts. And the boot device is usually freshly imaged from the source.