Why doesnt Microsoft make more security tools?

I've been getting educated by the Wilders community on security. And these are some of the things I've gathered:

1. Windows has some strong security features like LUA+SRP (limited user accounts+software restriction policies) that many people dont know about.
Furthermore, there are some (7?) startup locations in a users account.

2. Sandboxing is an easy way to add a level of security.

3. There are tools for monitoring system changes.

4. System freezing (aka deep freeze) can help recover from a malware install.

Windows can advertise point 1 more, and also make a tool for setting SRP for intermediate users.

2,3,4 should be trivial for MS to make, esp as they have full source code access to the OS (they did make steadystate which wasa barebones version of 4).

My point is, MS windows is so complex, its just a small step for MS to add some basic tools to make it much much more security friendly. Why dont (didnt) they do that? They have only recently been getting into the security business with MSE.

 

creating more ways to protect your product just means your product has issues to begin with. Doesnt go hand and hand to well.

 

Maybe MS considers their current offerings enough for security, especially when combined with the offerings of third party vendors. MS probably also doesn't want to get sued by everyone for trying to crush independent security software companies by providing all kinds of security software for free.

Or maybe it means the product is widely used and has attracted many attackers who would take advantage of any users of said product. Locks on cars don't mean cars have issues, they just mean some people are dishonest thieves.