Locking stuff down is the best thing we can do to protect non-technical users barring a complete re-design of operating systems from scratch with a renewed focus on security.