"Not very". I'm under the impression that a default Mac install is a little less vulnerable than the average Linux distro install, and a good bit less than a default Windows install (though that last part isn't very difficult at all).
Against a decently configured Windows install (and no MS apps installed/in use), I think Windows comes out on top. Though a decently configured Windows install versus a decent MacOS setup, dunno.