Windows could fix all their security holes, but that still wouldn't help all the thousands of poorly written apps out there.  Just look at the daily barrage of vulnerabilities on securityfocus.com to see what I mean.  Beyond .NET, what can MS do to help developers write more secure software?