I am not surprised. After all, can you imagine the support calls from all the Aunt Idas if the default was to block all? I dont blame MS too much. So many people want plug and play with no clue as to what they are doing, that it is always going to be porous.