Sure, I can see that nuance.

I guess I was working with the premise that devs fixing bugs on a project is a system of sorts.

I think you could look at it that way, counting the devs as part of the system. But if you do that, they become the weakness. Attack the devs that fix the bugs & take down the system.

Devs are the white blood cells, fixing the system when it needs fixing, but there is nothing antifragile about that.