Yes, but if a virus wants to install itself on a Mac, it has to ask the user to type in the administrative password. Many of them do, since they’re not skilled Unix system administrators.
A problem that is easily solved by not giving end users administrator access.