Bugs yes, sure, there will always be bugs. But it already is really, really difficult to get non-privileged code execution access, even harder to achieve tethered root access (i.e. root access that holds until a reboot), and all but impossible to get untethered root access that survives reboots.