Popularity and numbers are only one part of security, there are other things to look at. Look at the description of security bullitons for an os like linux or browser like firefox, they are more often than not minor trivial things, then look at the bullitons for IE, they are large holes into the kernel of windows.