In more entirely unsurprising news, Microsoft was hit hard by this weekend's SQL Server worm.
This suggests (to me at least) that the update mechanism that Microsoft uses to keep their products up-to-date is pretty badly broken. Perhaps not broken in a technical sense, but broken in a practical sense.
And this does nothing to refute the idea that Microsoft's security problems aren't just the result of bugs, they're the result of questionable architecture decisions...