Regarding VIM - it's not as risky as something that's exposed over a network, but it's had plenty of CVEs, and skimming them shows many if not most are related to memory safety. See:

https://www.cvedetails.com/vulnerability-list/vendor_id-8218...