Is it possible that the Operating System isn't the issue, but instead the training which potential system administrators receive prior to taking over security responsibilities? I know far too many 'NT administrators' which, up until two weeks ago, had never touched an NT box, but because they 'know windows' they've been elected to the job.
By comparison, it is relatively rare still (although thanks to the rapid popularization of linux, this is changing) to find a UNIX administrator that is similiarily un-clued as they have received quite a bit of experience and training prior to moving into UNIX. People don't start on UNIX, they graduate to it, and as a result, the experience-base is quite a bit more substantial than that of NT administrators.
Perhaps looking at things in a different context would help me explain this subtle but profound failing of logic by this insurance company (and by extension, almost all insurance) -
You are a member of a group. We'll say you're male. We'll also say you're from 18-25, a standard demographic. Now, if we compare that to a group of 18-25 year old females with regards to driving record, say, 1000 of each, we'll find a higher incidence of accidents amongst the male population. What we won't find out, however, is how much more likely any particular member of that group is to be in an accident. It is this flaw in logic - taking concepts which apply well to groups and applying them to individuals that form the basis of most forms of discrimination, including racism, sexism, and quite a few so-called 'hate crimes'. It is also the basis of insurance in general, and insurance is just as fundamentally flawed a concept as racism is, because it makes an unjustified leap of taking something which applies to the entire group and applying it to each member.
In short, while there is a correlation here, there is not a causation. This is why I believe that insurance is one of the most pervasive and active forms of discrimination in place in this society, yet nobody seems to notice. A pity they don't, a large portion of the '-isms' in this society could be eliminated if people were illuminated on this very important economic issue. But to tie it all together - it is a bold claim to make to say an OS is 'more secure' because of this, because the results are derived from a variety of (as yet not isolated) factors.
Society needs therapy. It's having
trouble accepting itself.