Killing thousands of birds with a single stone
>>I doubt it's the fault of Windows... you have to assume ANY system CAN be broken if an attacker has to access it.
Why would we have to assume that? Yes, an outdated, poorly maintained system might be broken if there is a physical access to it in a single case.
To (ab)use the quantifier "ANY" though, you should produce at least one case within 2-10 years when a specially crafted program breaks many systems GNU/Linux or *BSD at once.
The patent and exclusive copyright on that is all Redmond's!