This article misses the most import reason (outside of Express/Outlook, which really is a reason): lack of checklist compliance.<p>Most corporate "infosec" policies require all kinds of oddities like difficult password format, running an anti-virus, software pushes, micro-managing browser proxy, encrypted disks, "personal firewall", on and on and on. Corporate infosec standards are written to compensate for Windows weaknesses, and so require a large number of tweaks to a base linux configuration.<p>While each of these things individually is possible, all of them together is difficult, and non-standard and causes problems by interacting poorly. Windows at least nominally has all the features demanded by corporate infosec policies. Some infosec policy drone can check off a checklist of features, and give the green light to Windows far easier than he/she/it/them can do the same for a Linux desktop.