Right. Nate Lawson has some thoughts on why at https://rdist.root.org/2010/05/03/why-buffer-overflow-exploi... and https://rdist.root.org/2010/05/05/why-buffer-overflow-exploi...