> Considering there are still new bugs found in chip designs, operating systems, and compilers that have been around 4 times as long

Not quite the same. Those codebases are much larger, often include legacy spaghetti code, or are closed source. This makes it more difficult to find exploits, not to mention there's not as clear of path of financial incentive.