This is a study where numbers are of no consequence. Vulnerability is measured by the target put on it's head. If you want to talk about how vulnerable or invulnerable something is you have to first put them in the same realm of usage. People attack windows as a wide base and with general disdain where Linux may fly under the radar. If an angry empire switched over to Linux they'd be faced with the same threats. Nothing with connectivity is secure.