Likewise, with proper security knowledge, the holes that Apple leaves unpatched for months are "minor threats." For example, disabling Java in the web browser when there's a known vulnerability. It's an inconvenience, but so is having to always be on the watchout for things that are out of place.
Apple is not fantastic on security, but they are good enough for the current threat level, as long as you take basic security precautions.