Can happen, has a long history of happening, and if not by “just attached for minutes” then by a host of other malware attack vectors.
That vs _one_ instance of Mac malware, which requires baiting the user into explicitly allowing administrator control, that you’re touting for “see? they’re beyond stupid!”
Get the plank out of your eye first.
Ok, show me one win7 malware that installs as soon as I plug it on the network. I will even take my windows 7 machine and browse to whatever site you like me to go to and see if I get infected.
Time to put up or shut up.