People just target macOS less.

Like Apple was shipping a year old vulnerable version of java at some point, and their update mechanism still sucks compared to everyone

The only reason it’s more secure at this point, is because they’ve made it extremely difficult to install things from outside the app store by default. If anyone else forced you to jump through as many hoops as they do, they’d be hit with an anti trust lawsuit