...if the Mac developers have a good tester base and do security upgrades often enough. Do many Mac users do prompt PRs (bug reports) containing relevant information?
Per Apple, yes. And the underlying OS is actually Open Source (Darwin) so lots of eyes are looking at the code.