You clearly are redefining security breach not to include severe and consequential types of security breaches. Social engineering attacks that allow accounts to be stolen are a big problem. Just because they can't be patched with a new FreeBSD kernel update doesn't make them unimportant.

Apple needs a system that blocks obvious social engineering attacks anyone could easily use against you based on public records if it doesn't want a reputation for security disasters. Apple has already failed many high profile people and probably lots more regular citizens; it deserves shame for its failure.