[brookst]

Not coincidentally, that was around when Microsoft really internalized that they are an enterprise company, not a consumer company.

In enterprises, the local user IS hostile, or at least some percentage of them are. The ethos of “we can’t trust end users” leaked from enterprise fixation into general Microsoft culture.

[abustamam]

Local user being hostile should be a user group setting in enterprise versions, not a default across all versions of them.

But now that I think of it, I was pretty hostile to my computer when I was ten years old and running windows 2000. I don't think we ever saw so many pop-ups before.

But even so, the admins of the computer system should have control over their computers. I can understand if my mom's user profile might have limitation, but the my admin profile should not.

[TeMPOraL]

Security isn't an unqualified good. You're always secure something from some threat. Keeping the subject and the threat actor implicit is causing confusion in minds of many tech people, and is in part the reason how we land in situations like this.

Windows is not just an operating system on your computer. It is a product (nowadays, a service) of Microsoft. Some security systems in it are meant to protect the PC/system/user from external threats. Others are meant to protect Microsoft, and Windows as a product/service, from the user.

Being specific about what is being protected and from whom, is more important than specifics of the actual security technology. After all, depending on the answers to those two questions, the very same security technology is protecting you from a cyber-criminal installing a rootkit on your PC, protecting Microsoft from you pirating Windows, and protecting copyright interests from you trying to watch a movie in a geographic location they don't want you to watch it in.