- many would prefer to whitelist trusted software than blacklist malware
- bypassing AV is trivial
- http://www.sevagas.com/IMG/pdf/BypassAVDynamics.pdf
- https://github.com/Veil-Framework/Veil-Evasion
That many security experts use GNU/Linux or *BSD is definitely a factor, but many people still use Windows.
Great question, though. :)