FF helps to block spyware essentially through its "We're not Internet Explorer" feature. Opera has a similar feature, but I think they stole the code... or vice versa.
Anyway, the ActiveX controls and Active Scripting found in MSIE are somewhat suspect, and have been repeatedly abused+fixed+abused. Since FF/Opera don't use them, they don't get exploited. The .net framework is probably going to be the next target, but I believe MS has been careful up to this point with securing it. Cross your fingers and all that. IE also uses security zone features, allowing it to be trusted at a higher level than most applications. This is supposed to allow IE to become a platform for new applications. Essentially your company can roll out a new program, or version of a program for everyone to use through their browser. To save files and do other office work, it has to get access to your computer beyond what a traditional web page might get. Abused+fixed+abused.
As for viruses, I can only guess they're referring to Outlook, which is the Typoid Mary of the interweb and has a tight relationship with IE. Maybe FF blocks some virus entry points, such as spoof blocking or port controls.