It is important to decouple distributions from Linux itself. Some distributions do not place security as their top-most priority, but rather ease of use. Then,

It is important to decouple distributions from Linux itself. Some distributions do not place security as their top-most priority, but rather ease of use. Then, there is no "one" Linux desktop. You have different X servers, different window managers, different desktop environments... In Windows there's only one of everything, the configuration is less flexible in terms of what things you can disable, and once something is vulnerable that's it. e.g: Vulnerability in fonts being rendered on the kernel? What can you do about it exactly? Nothing but to wait for updates... but then the Flame malware installed itself via Windows Update. It's fantastic.