Every piece of software definitely has serious vulnerabilities, perfection is not achievable. Fortunately we have another approach to security: security through compartmentalization. See: https://qubes-os.org
But even then you’ll have users putting things in the same compartment for convenience, rather than leaving them properly sequestered.
This is a good point; however the isolating code should be much smaller and easier to verify.