Yes there is a time between discovery and patching but if you look at their competitors, Windows is much farther ahead in the security realm. Microsoft's whole security cycle is better defined and IT managers have a much easier time managing security updates from Microsoft than anyone else.

Dropbox isn't a marked man because it doesn't have the capital of Microsoft, they've had to testify because they have a serious security and privacy problem.