Re: Compare and contrast...
@Hans 1: After a decade of patches, you would expect it to be, right?"
The patching process itself introduces its own vulnerabilities. As in you could take a particular hardware and software combination and have it certified to EAL7. Any addition deletion or alternation to the system renders the cert void.