I would have to disagree on that, if we were just to look at the time it takes to discover a bug to patching it, I think Microsoft is the fastest. Another big question is are the apps we're using actually using HTTPS? If you're interested, you could always set up charles proxy to find out 🙂 But some apps send debugging/crash information without telling you, and that could be a risk(Hockeyapp, fortunately it uses SSL).