Non-web code probably lasts longer because it isn't on the front line of ever more sophisticated attack vectors.