Ya I agree, if you compare the two directly but you have to consider the chance of either event occurring. A highly likely crash that destroys my most important document is more serious to than the much less likely event that an attacker would specifically choose my computer.
My point is to broaden the notion of security, not to attenuate concern over remote attacks.
Huge numbers of people have their machines drafted into botnet by drive-by clientside document vulnerabilities like this. Nobody has to choose you as a specific target to make that happen.
My point is to broaden the notion of security, not to attenuate concern over remote attacks.