One difference is that Apple is actually quite good at understanding which features get exploited in zero-click attacks and IT departments are not.