One question that is worth asking is how many of these exploits can be done remotely, and how many of these exploits require physical permission to a system?

It is worth noting that there is a difference between exploits that require physical access and those that can be conducted remotely.

Speaking just for myself, I am not certain which operating system is more or less secure, but I do not think that operating system security matters as much as user habits. I have ran Windows XP since 2001 and I have never once suffered from malware or a virus (except when I transferred a USB-stick virus onto one of my computers just to see what would happen). I know that the plural of anecdote is not data, but it is worth noting that it can and has been done.