[eeZah7Ux]

More importantly, most Open Source projects encourage and welcome reporting vulnerabilities.

Various closed source vendors discourage that even to the point of suing people for reporting vulns while keeping known ones secret.

[raesene9]

Well doesn't apply (AFAIK) to OS vendors like Microsoft. They actively encourage, and pay for, security bug reports.

In 2013 they paid out $100k to a single researcher for a set of bug reports.

So I don't think in a comparison of OS-->OS bugs that factor would really apply