Enough layers
Windows didn't need more security features/checks for viruii or post infection fixes. It needs a complete re-design of how it handles security from the core. It's not something that can be tacked on after they program their shiny new features.
Ok, so it limits the permissions of third party software. But what about the monthly security vulunerabilities in windows/IE that allows a remote attacker to take complete control of my system?