hello pot, I'd like you to meet kettle and Microsoft
The real question in my mind is, was there any possibility that the vulnerabilities were placed within the OS by a FISA court order from the NSA. Basically a personal front door for the NSA, with total plausible deniability, as would be required for spycraft or cloak and dagger.
I know that it is common to attribute incompetence to major security holes.