I believe
Mr Wallen is saying we'd treat just being asked as suspicious,whereas unfortunatley many windows users either wouldn't get prompted becasue they turned UAC off, or would curse it and click okay.
Social attacks, aside from not allowing the user any privileges on their machine, only education can alleviate.