I couldn't agree more.

I suspect that they must have turned off a lot of Vista's default settings too - IE7 running in Protected Mode alone will prevent harm from most malicious websites, to give just one example.