SmartScreen addresses the security 'hole' that is the user itself. I'm curious about what you are really asking them to address here? I'm not seeing a solution other than for the OS to only run signed code. What OS is secure from arbitrary executables that the user chooses to run?

I agree that it is annoying, but I'm very interested to hear what they should be addressing here.