I'd speculate that at this point Linux etc are probably having vulnerabilities discovered and patched faster than created.

It's not only Linux though and many projects don't have the funding to perpetually use something like Mythos.