That may be, but the biggest security hole of most systems is the people who are managing them, or lack thereof.
Bingo. I've seen reported vulnerabilities, but no Mac viruses in the wild; but it doesn't take much programming chops to write a Trojan Horse that some doofuses will download and install, clicking "OK and entering their admin password each step of the way.