Closed source doesn't imply security through obscurity. Any operating system, closed or open, can be vulnerable. iOS is a big, relevant target, and obviously a lack of publicity/quantity of commercial exploits against AOSP and Desktop Linux doesn't necessarily mean good security.