Man is it fun watching Slashdot readers be convinced this must be faulty research without having read the research itself. Why not wait a few days until you can verify what the researchers did (should be available later from the blackhat.com website) and provide actual analysis on the research.

You can't fault the conclusions unless you know how that conclusion was reached.

(Of course, if the conclusion had been that Apple was better at 0-day patches, there'd be a lot more, "Well, duh!" responses.)