I do not agree with many of your assertions about XP and IE. Though Microsoft has added numerous pseudo-security features such as phishing control, they have neglected many other important areas such as standards adherance, overly agressive calls back to the mothership, and overly lax certificate validation (enabling SSL for your browser and other purposes).