Have you ever heard of "Windows 10"? They got less CVE vulnerabilities reported in 2016 than Android, Debian, Ubuntu, Flash Player, Adobe Reader, Mac OS X, The Linux Kernel, iOS, even Chrome and Firefox[2].
If these are not examples of "adequate or even reasonable protection", then you got really unrealistic expectations or you're simply hating Microsoft for the sake of hating them.
As I said, it is not possible to deliver bug-free code, and you learn to live with it or you die hating every software vendor in the world.
Just remember, falling in the "I don't need AV, I don't use Windows" fallacy will bite you, and will bite you hard[3].
[1] https://chart.av-comparatives.org/chart1.php
[2] https://www.cvedetails.com/top-50-products.php?year=2016
[3] https://scalibq.wordpress.com/2011/09/02/the-kernel-org-hack...
Security is more than being impervious to every conceivable attack. Just being able to restore an infected system would have made their platform "reasonable". But they didn't.
Also, windows defender was YEARS too late. Which was why I specified the 10 year window.
That's not what he said. You said you hated Windows because of its vulnerabilities, and he was asking you if you apply that same standard to FOSS, and if not, why not.
My original comment specified a roughly 10-year period, from about '02-'12. Most of the malware then was not state sponsored. And I'm not blaming MS for having a few vulnerabilities. But literally hundreds, perhaps more. Patch Tuesday ? Really ? Their product was so bad they had to dedicate a day of each calendar month to addressing vulnerabilities.
But what's worse, was the response. They had time to patch all these holes, but not to write code that fixed users' systems from the damage that the exploits did. Or to address the underlying vulnerable model that lets these exploits happen. They just played "poke-a-hole/plug-a-hole" for most of a decade. Someone brought up Windows Defender, wasn't released till October 06, and it didnt' work. Everytime I removed spyware from someones machine I used free tools such as MBAM made by third parties who weren't even being paid by MS! Even with all these vulnerabilities, it would have been better if System Restore actually did just that. They should have architected a system that, in the worst case, could restore you back, _including virus removal_. Thats how you take responsibility in that situation.
Instead, they used the situation to further profit, by releasing more versions of windows. Thats a weaker version of racketeering: "oh, version XP has major security bugs...better pay us to upgrade to Vista!... then to 7...then to 8".
If this were any non-software product, there would have been massive class action lawsuits and recalls. And that would send a message to the whole community that you can't harm people and leave them high and dry
It's "pretty obvious to me" that the biggest software vendor on earth would be aware that their product would be targeted as you say and provide adequate or even reasonable protection for their customers. Not hide behind their EULA as their product was being used in organized crime. This is the "unforgivable offense" I mentioned.