is it because that Debian is a Free Software and hence bugs are relatively easier to identify than in closed source software like windows where only the developers and a handful of people know the actual issues, but they choose to keep them secret and fix only the ones that are profitable to them which results in many unfixed vulnerabilities such as the ones caused wannacry?

kerala has topped the list of states with highest no. of recorded crimes, but that only tells half truth as the actual no. of crimes v/s 'recorded' crimes depend on many factors. that's why it's said that there are "lies, damned lies and statistics"!