Coming from a person with no computer knowledge...well...very little...logically, your question being taken at face value, then A would be more secure in that, although being critically vunerable, it is not under attack, therefore, is more secure...because, at face value, you do not say it will be attacked, it's just vunerable...therefore secure.

In answer to your second question...that would be B...at face value.