"The hardening required for a reasonably secure Linux distribution is far greater than people assume. You would need to completely redesign how the operating system functions..."
quotingVery interesting article about the state of Linux security.
nevent1q…nt50
While I agree with what it says, I don't agree that Windows is going in the right direction, because the mitigations that windows introduces are useless as long as they don't break backward compatibility.
Windows has a basic problem, an architecture problem mainly due to the binary backward compatibility which makes security problems dragging and difficult to fix.
On the other hand, if you need extreme security and privacy, use Qubes OS.
https://madaidans-insecurities.github.io/linux.html