Good to see Apple are on the job
It is good to see Apple fixing these problems – some found by them, some reported by others either in research or practice. This is the way it should work.
Just remember that Apple has a more secure system than both Linux or Windows. This is actually in the fundamental design. Linux has 22 million lines in the kernel. The kernel should be the smallest process supervisor, maybe 10s thousands of lines of code. If a process fails, it fails independently. But in Linux wayward device drivers could bring down the whole lot. This also causes a problem for security as well. Instead of dangerous inter-process calls being brokered, for speed Linux allows things to be directly connected. Those problems are by architecture and can't be fixed.
https://github.com/satoru-takeuchi/linux-kernel-statistics