I had a long, discussion with someone today about #linuxdesktop security vs. #windowsdesktop security.
While my philosophy has always been that you should follow best practices - keep your system updated regularly, close your firewall, don't install from untrusted sources, this person argued about the insecurity of the xserver (no debates there besides mentioning Wayland).
He couldn't recall specifics when pressed, and promised to circle back. Not a troll, he uses Linux as his driver since 02