I tried it in Vista, and it looks like CardSpace is openend on the secure desktop (same as the UAC prompts).

Why this is needed I don't know.