The unaccountable 3rd Party market that is built around MS is what caused the issue.
No OS is 100% secure, but as soon as you allow 3rd Party vendors to fuck around at the kernel level, they get much less secure.
Microsoft is to blame for allowing these fucktards kernel-level access. There were other ways they could have enabled third-party intrusion prevention software without giving away keys to the city.