Yeah, Windows has issues because of being popular, but nothing like they used to. They've made changes to their processes internally which has really helped. But it's still a huge codebase and attackers continue to get better with finding things like buffer overflows in various components. Plus the addition of various silly features to stuff that doesn't help the complexity (TCP/IP, SMB in recent years).
Also, having *accounts* hacked is one thing, and is sometimes user error/weakness. Having your entire network hacked to a degree that you have to take down your entire product for near a week? That's an endemic/inherent problem with your security.
Anyway, no need to belobor that vein of the topic.
