One thing that hasn't been mentioned here yet is Apple actually has improved their announce-to-patch time significantly from just a year or two ago. It doesn't mean its up to par yet, but I do not think it at all fair to say they are making no effort. They certainly are making strides to solve this problem. Of course security conscious folks will never be satisfied but security cannot be the sole focus of a company. It must be weighed against competing concerns.

Any long time Mac OS X user will know what I mean. In the first few years of OS X we never saw Security Updates often let alone one every month or two like we see now.

I'd say they're moving in the right direction. Eventually they'll be where Bart wants them to be: patching same day as announcement.

That's my sense of it.