Not a hole… not any software should protect (or even can protect) from everything.
Maybe, in your opinion, a lack of some feature.
avast does not protect it either… Try WinPatrol 8)
But wouldn’t an attack to reach the HOST file be detected by its rules anyway (as an invasion of privacy) and block the intrusion and likewise for avast, if a virus was released that attacked the HOST file then wouldn’t a new signature detect it before it could run???
HOSTS file is “inert”, like a text file, avast will scan it and won’t find anything there.
So you must a file monitor (different from antivirus) and so I’ve suggested two of them…