And yet useless because 90% of compability modes will send such security to /dev/null. Office macros, OCX, Active X compat plugins for IE11 (they still are), VBA, VBScript executions, screensavers as they stated, drop-in replacement DLL's, security overrides because that w9x doesn't work with admin rights...

And so on.

WinNT would be secure if MS ditched Office Macros (or at least hard-sandboxed them) and ran all w9x software on seamless VM's.