The os exploit is, within this context, after the fact and therefore a non sequitur. You should look up the Project Zero watering hole analysis where they revealed something like 17 0-days being delivered to visitors of one particular site. It's likely that citizen labs only had windows exemplars.