Microsoft's desktop software only gained a reputation for insecurity because until relatively recently (early 2000s), the rational move for them was to not secu

Microsoft's desktop software only gained a reputation for insecurity because until relatively recently (early 2000s), the rational move for them was to not secure it. Their software designed for governments etc - that doesn't have the same motivations. Also, you'd expect the classified stuff to run on an airgapped network (or equivalent), so that there's no real attack vector anyway.