The distributed nature just means that if attackers find one exploit, they can apply it repeatedly to the distributed application, to give themselves an entire botnet.<p>All code is privileged, so any remote execution exploit in any piece of code makes you own the whole machine (physical or virtual, as the case may be).  A buffer overflow in some HTML-template-stuffing code is as good as one in an ethernet interrupt routine. Wee!