Microsoft's new identity: secure OS vendor?

So i guess they use more security policies, more strict, prudent, or even common sense? That's got to be good no? A step in the right direction?

Even though the user (admin) has to do more work initially to set it up properly (not that it wasn't the case with XP...):

like outbound firewall,

"The real Administrator account is disabled by default",

"Even the Administrator cannot directly overwrite files in the \Windows and \System32 folders. They have to take ownership first, and add the correct permissions"

I hope this doesn't strict the usability of Vista (admin disabled), or the security (refining the policies), generally speaking of course, since security issues will allways arise.