I’d think the biggest threat to security is the dumb user that is determined to get a virus no matter what you do :-)
And yes they do exist in abundance. And unfortunately that has forced Microsoft and other vendors to lock down the capabilities many of the “good” users like to have. It’s like socialism...we have to dumb it down to the dumbest user. Or I guess that’s Apple’s philosophy too.
A lot of MS’s problems come from slovenly coding practice and the language they use - C++.
If you told me that a plane I was about to board used C++ in the flight management system, I’d turn around and get the hell off. I’m that convinced that C++ is such a crappy implementation language.
C is like pointing a loaded pistol at your feet.
C++ is like pointing a minigun at your house.