I think those kind of vulnerabilities are pretty rare, though. If one is discovered while the phone was in widespread use, then hopefully it will have been patched, but after that attention will be focused on finding exploits to newer, more popular phones.
Really, most of the things you need to worry about are in the software, so updating that with custom ROMs should fix the vast majority of potential issues.