Re: Perhaps money will talk louder:
"compare that to FSF software, where patched binaries are usually readily available in the repos,"
Quite often weeks or months after bugs are actually privately reported though. No real difference there to Microsoft. The main benefit of Microsoft is a scheduled monthly release cycle you can plan and sensibly test for versus a zoo of random updates...