One bug per year? What has this guy been smoking? Any processor comes with an errata sheet. Some bugs get fixed in firmware, some are not serious enough to do anything about until the next release. Like the fdiv bug. Oops.
Reduced design verification? Not that I've seen. But I'd like to see any DV methodology which includes attacks by hackers.
I wonder what the bug rate is for the equivalent amount of Microsoft code. Remember, processors work pretty well without hardware patches every two weeks.