[fungi]

IT departments often lack the skills and/or desire to use anything but MS

[vee-kay]

Reverse argument is true as well.. If corporations were not using buggy/fragile, complex, and potentially vulnerable products from Microsoft & other vendors (e.g., Oracle), there may NOT have been need of so many skilled engineers and IT departments.

[7bit]

All software is vulnerable, so what you're saying is not true. The only reason the products you listed seem more vulnerable is because they are focused by malicious actors due to their popularity and hence, also more often in the news.