But how does Microsoft having better security fundamentals follow from that? The extent of pwnage possible doesn't magically make them follow best practices.