The default installation setting of the Remote Assistance, to allow MS come in and access your system any time they like, all they needs is the IP address. To turn this off completely, by disabling every aspect of it, takes about 15 minutes by closing down various services, applying complex passwords, and locking the accounts. You don't get this with any other OS.

How can you get security, when the default setting is an open, remote access full admin account.