Everything complex enough has exploits, you can't make exploits impossible with design, just less likely.

The point of engineering is measuring and confirming errors, and designing to mitigate them. Exploits are errors.

Complexity does not lead directly to exploits, letting errors be ignored does. At what level an error can be ignored - that's quality control. And one can tell poor quality software by how exploitable it is.