3 is true also
It is not MS hatred, it is a fact. Windows is not designed for security, period. Look at UAC - the system just cannot figure out who or what pressed a button. Try to turn on the Windows 7 firewall. I mean turn it on in real and not marketing terms, rejecting outgoing connections, and see for yourself if Windows can be both secure a usable.
Win32 cannot be secure even in theory and Microsoft finally accepted that. WinRT can be as secure as Linux, theoretically. Being secure means that when compromised the damage is limited.