QUOTE(turetzsr @ Oct 26 2006, 07:50 PM)

...Well, maybe, but then we must consider the oft-mentioned hypothesis that inattention to security is only one of the reasons for attacks on IE/Windows -- the other being that there are so very many of us users of IE/Windows.
I think XP SP2 is one of the most security conscious things MS has done to date. They implemented a built in firewall, defaulted to automatically update the OS, and warn if there is no AV or it's out of date. Those things by itself helped a lot. So, an IE with a built in phish net and security defaulted to medium high, I believe, should help more.
According to MS, by the time
IE7 meets Vista, it will be a sandboxed browser. So, if the majority of the problems were caused by ActiveX (which is what is the most common trait leveled against the browser) are essentially cordoned off, it will have a significant decrease on browser installed malware. For problems from Office/Outlook, that's another story.