The OS is the biggest weakness aside from sloppy protection design.

Blah-blah-blah...
I'm managing my small business in developing the protections for individual clients (not some widespread bullshit like armadillo or so) and I can assure you, OS doesn't really matter.