Earlier quoted context omitted.
You're right, but ultimately this is a band-aid over the fact that OSes have terrible permission separation and application isolation. If OSes were better architected from a security point of view, it would be substantially less of a problem.
You seem to know a lot more about operating systems design than Microsoft. Why don't you submit a paper?
a) I'd like all applications to be run in sandboxes. That way you don't have to care if you application has malware or its processes got hacked. You have that in iOS I believe (but iOS has other problems), but to various degrees it's been done in solaris and freebsd, probably can be hacked in linux but no major distro has it as a precooked solution.
b) Have OS written in memory safe language. Microsoft got Singularity, I have no idea why that never saw the light of day. That thing could kill Linux on a large portion of the server market. Hopefully we will get something written in Rust now.