Its called clickbait BS.

These Servers are secured by so much and don't even run out of the box anything, they run entirely custom operating systems based on Linux wich are behind massive Firewalls.

Idk about the endpoints, but this seems to be targeting desktops and not servers, as those don't have KDE.

Windows is harder, so less valuable to spend time on.

I see that as a possibility but not because they are writing malware

Also China is a much bigger country compared to Russia so there would be a big loss.