I seem to remember the CVE database search utility on Mitre's web site stating something along the lines of "comparing the number of CVEs by platform shouldn't

I seem to remember the CVE database search utility on Mitre's web site stating something along the lines of "comparing the number of CVEs by platform shouldn't be used to draw conclusions". Possibly a CYA-esque liability statement, but the principle seemed sound.