I have to ask what this even means. The last time the world started holding Microsoft publicly accountable for its security indiscretions was the "Summer of Worms" in '03. From that point on, starting with WinXP SP 2, Microsoft has put an absolutely huge amount of effort into security, including:<p>* Training virtually all of their developers on secure coding<p>* Modifying their core libraries to avoid dangerous idioms<p>* Spending tens of thousands of dollars per product <i>per release</i> on external security testing<p>* Slowing down dev cycles with "SDL" measures like threat modeling and code review<p>* Holding off releases to audit for new bug classes<p>I'm not saying that Microsoft ships perfect software, because what I'm saying is that it's impossible to ship perfect software.