And therein lies the entire problem: the average moron thinks that security is an afterthought, something to be added on after development of the OS or application.
Security is a WAY of coding your application.
Microsoft's problem, and this is a HUGE problem, is that they try to integrate applications into the OS, without clear and carefully controlled APIs between the two. Microsoft does this for their own reasons, not because of the needs of the customer. "FCUK THE CUSTOMER" isn't a real good attitude to take, doesn't help you stick around as a company unless they're forced to, and Microsoft's monopoly days are numbered. No monopoly lasts forever, because with 90% of the desktop market, they are their own worst enemy. It simply isn't sustainable.
Customers need security, more than ever today.
Glad I could help explain these simple things to you.