XP SP2 = 2 new admin loopholes?

SP2 has been out for several months now, so if there were serious holes found, they have probably already been patched.

Has anybody found a way to repair XP SP2 without a forced rollback to SP1 and the necessary re-install of Updates and Patches for security and reinstall of SP2?
When will we get an OS release that doesn't need third party protection for security?
Especially since the AV firms are not stepping up to the plate to stop all malware including spyware and pop-up spam.