Feels kinda obvious to me? As time goes on bug density can only go on direction, and making no changes to a codebase certainly doesn’t make it go up.
For bugs, perhaps, but for vulnerabilities, new attacks and techniques are being found. Or just nobody is looking at most things most of the time and it's not really correlated with age that clearly. Imo it's good to have the data of what actually happens