My word yes... In IT we have to base our decisions on what to fix by Severity (in fact this is also the way that Hospitals work also) and if the issue is severe enough it is given more attention, and receives fixes quicker (also like Hospitals, yes I worked in one).
You started mentioning Microsoft's occasional slowness when fixing bugs, but it's irrelevant for non-Microsoft software? Interesting.
The thing with most of the "Microsoft Security Bugs" is that they usually allow an intruder to enter your PC and "own it" if you will, how many people "owned" computers through this "non Microsoft bug"? It also exasperates the problem that M$ operating systems have a majority market share which increases the attack visibility (where as this is not so much of an issue for Xorg).
What would be the priority in a busy hospital? And where would those priorities lie?
"I pricked my finger and need a bandaid" ~ Xorg
"Someone cut my arm off... HALP" ~ M$
While i'd love to live in a world where bugs don't exist and everyone lives in "Happy Fantasy Land", this is not the case and priorities are needed some times.
Where did you get your tin-foil hat and where can I get one? The ignorance looks to be bliss.
There's no such thing as "secure enough" in the post-Snowden era.