Sure design goals, well I&#x27;d argue that Windows has had &quot;improving security&quot; as a design goal for some time now, and that this has had measurable impacts on the security of their products.<p>For example take SQL server as a good example, compare the number of RCE issues that it&#x27;s had with say.... Oracle&#x27;s Database server, another well funded company with loads of &quot;PR&quot; money.  You&#x27;ll find the SQL server has many fewer security issues than the competition, and I would suggest this is evidence of Microsofts improved attention to security...<p>MS default configuration are really very good.  I&#x27;d compare to your OS of choice, but you don&#x27;t choose to disclose it :)<p>So on the server-side I&#x27;d say that when I test modern default installs of windows based products they tend to have a good security posture out of the box.<p>Security Updates, well everyone has a load of those, are you suggesting the MS is worse than their competition? Counting OS vulnerabilities is notoriously difficult to it&#x27;s hard to get an Apples to Apples comparison here.<p>Botnets, well there are botnets on linux for sure, and OSX has had it&#x27;s share of malware to as has Android.<p>If you like a small open source OS then that&#x27;s fine, but it doesn&#x27;t necessarily make another entirely different OS have bad security.<p>now I know there&#x27;s a reasonable chance you&#x27;re thinking I&#x27;m an MS &quot;fanboy&quot; or similar at this point, but I&#x27;m not. I use OSX&#x2F;Linux and Windows (as well as some iOS and Android) where they work best for me.