Symantec based this on flaws found though. That doesn't exactly work comparing opensource to proprietry.

Of course there's going to be less found in IE if you can't see the source code!