I would think that there would be more attack surfaces if the codebase is more complex.