most Linux distros have SMB built in

[Citation needed], clients are a mixed bag from what I can quickly find, and servers are NOT 'built in'.

are an apt-get away

Exactly, when they're not installed it's not part of the attack surface.

even Android has SMB built in.

You're gonna need to bring a source for that, because unless they added it very recently, it doesn't. Google released an (now unsupported) shitty app for it, but it's not built in.

Are there really that many people playing Candy Crush and Disney Whatever on Windows 10?

Oh look at you, being so clever by ignoring the point about security and instead framing a strawman around advertisements.

Yes, you found an actual valid complaint about Windows, good job. Now if only /u/SirNanigans would use said valid argument instead of making nonsense-arguments.