If you look at the distribution of their findings in the linked post, most of theirs are issues introduced a long time ago, almost all before 2006.

Complete speculation, but I wonder if they and Anthropic are scanning very different codebases and Anthropic's skew would be in the other direction.