It's a completely fair comparison is one is assessing which is more secure. The answer is completely straightforward. One project patches/updates vulnerable so

It's a completely fair comparison is one is assessing which is more secure. The answer is completely straightforward. One project patches/updates vulnerable software and makes sure everything else works, while the other puts all the effort on the user.