Re: "no self respecting spook would be caught using Microsoft Windows to do their spying"
"Now, a spook should know better than to use a Windows machine"
Other options may be worse:
"with 523 vulnerabilities landing a CVE number in 2016, Android carried nearly double the patch-load of Adobe Flash (which had 266 and was number four on the list).
It's worth noting that while Debian Linux (319 CVEs) and Ubuntu Linux (278 CVEs) landed second and third places"