Generated code can really build up quick. And that's not taking into account the transformations from higher level languages down to op codes. I use a lot of code gen and some projects I manage ~50k loc which can balloon to 10x that.

The exploits i'd bet are still in the human written weird stuff and not unfolded loops and boring setters/getters.