It seems surprising to me that they went from shipping a vulnerable WebKit with numerous public CVEs on day 1, to producing a more or less bulletproof OS?