Windows is probably considerably more secure against browser 0days, but how much malware is actually distributed that way? I expect most of it comes from people manually running malware executables they mistakenly download from websites.