Did anyone claim qubes does not have security holes? The point of qubes is not to "solve security", it's to make a useable everyday OS that offers better security than other general-purpose OSs. It does this by isolation and minimizing attack surfaces between moving parts.

EDIT: Here is some documentation that describes the security stance of the Qubes OS project. As you will see, being security-bug-free is not a goal, and in fact, the guiding principle is that all code has security bugs, hence everything is isolated to prevent escalation. http://files.qubes-os.org/files/doc/arch-spec-0.3.pdf http://qubes-os.org/trac/wiki/SecurityCriticalCode