You're right, I grant.
But Vista was SUPPOSED to have fixed that. The original specs for Longhorn called for major rewrite, even a codebase change. One of the things I recall hearing about was the much-anticipated, "Users will be able to run apps without admin priv", which we all took to mean, "Vista will REQUIRE that the applications NOT require admin priv, except to install."
Instead, we have this debacle.
And worse, things like WindowsLive OneCare, which (I say this as a mostly-content user) requires that training the firewall be done with admin priv (correct) BUT it doesn't give the user a way to elevate themselves during the blocked connection -- they just see that the app failed for no apparent reason. The next time an admin LOGS IN, then up come the dialogs to allow the connection.
STUPID, STUPID, STUPID. And all at the feet of Microsoft, by design.
So while the apps developers are surely not innocent, Microsoft had the opportunity to fix this in Vista and other recent MS software, and has refused to do so.
I think they've been infiltrated by Apple moles. It's the only explanation for how often they screw up Windows. ;-)
They just left off the rest of the sentence, "...once everybody rewrites their apps to work with the new security model."
STUPID, STUPID, STUPID. And all at the feet of Microsoft, by design.
I read an article way back about the group that designed the dumb sleep/shut down/hibernate/etc menu. It's apparent that Microsoft's mismanagement and ponderous corporate structure with strained and slow communications are also largely to blame, not necessarily the programmers, and not necessarily by intentional design.