Nobody ever talks about it. Everybody always says bullshit like "People just attack MS because they are the biggest", or "its trendy to attack a big company" or "if BSD was 99% of the desktop market, they would have just as many problems".
The security problems stem from the initial design. The security (or lack thereof) in MS OS's can never be fixed until the OS is re-designed from the ground up.