[ngneer]

Playing devil's advocate, compare their popularity. You may have fallen prey to the base rate fallacy.

[fsflover]

https://forum.qubes-os.org/t/are-we-safe-because-we-re-a-rel...

tl;dr: Qubes security relies on Xen, which is quite popular. But even Xen has more vulnerabilities than Qubes thanks to a clever design: https://www.qubes-os.org/security/xsa/#statistics.

[ngneer]

Touché