This was only done on an old laptop that barely functions and with only one game now so take it with a grain of salt:
I did put Fedora Core v15 long ago on it to see what it was like and when I managed to force StarCraft 2 under Wine on it, I found that the average and minimal framerates for it were higher than in Windows.
Here's the specs on that laptop (it was bad but did what I needed it to do for course work): Link
I think that a good chunk of those vulnerabilities may be way less than what is commonly considered. When most people think vulnerability they usually jump to remote code execution. Those represent the most severe. I would think that things like triggering an authentication prompt (UAC in Windows) when it should not be allowed to is considered a vulnerability (a much more minor one).