Security Flaws Found in SP2

[Triple7's]

And we should be surprised?

Quote from the article:

Neither security hole could be exploited by a remote attacker, and both require Windows users to take actions, such as opening the Windows command shell, or renaming files to overwrite other files on Windows, he says.

It's only a matter of time when that will no longer apply either.
I don't care how tight you lock it down, someone always makes a new key that works.