There are less attacks on a product that hasn't been around that long, that's common sense. Wait a year, try again, and I'll bet you that you'll see significantly more attacks on SP2 machines.