Depends. Security is and never was only bug free software.
If no attacker reaches system X you are not as exposed as with your internet facing frontend.