There are only two kinds of people who regularly complain about the state of Linux security: OpenBSD advocates and security vendors who want to sell you something. Seems like an awful lot of the latter are quoted in this WaPo piece.
There's a third kind of person: people who work on products that rely on Linux being secure. Kees Cook is one of them, being a Google employee who works on ChromeOS security.