Windows

Windows has a far more secure kernel due to mitigations such as CFI.

Windows is far more advanced and puts more work into sandboxing, exploit mitigations etc. For example, Windows has had CFI since 2015 in CFG while Linux still doesn't have it in any form (excluding google pixels).

All windows store apps are sandboxed by default. Any random program isn't sandboxed but there is a sandboxing utility you can use.

It says a lot when the top linux security experts use Windows.

Just look at what Brad Spengler or PaXTeam's preferred OS is.