I get it, you love Microsoft. That's your prerogative. But allow me to draw your attention to the following:

1. I did not state my Mac has no updates turned on. I said no automatic updates turned on one of them. Two very different things, and in many IT systems, the standard practice.

2. Apple doesn't allow anything to run in the kernel. Hasn't allowed that since 10.5 I think and before that it allowed so via kernel extensions. Very different ballgame.

3. Even Microsoft admits that Apple's security is better in their fingerpointing at the EU, stating they couldn't do what Apple does because of an EU court-ordered agreement.