while i agree with the general sentiment of your post, it is dangerous to say, just because you haven't seen an exploit, it means there is no security flaw. Depends heavily on what a possible exploit would be. Possible information disclosure wouldnt be noticed quickly unless someone points it out.
