“The only way any OS Windows will ever be even close to secure is if Microsoft quits automatically giving superuser privilege to ALL user accounts by default, and instead making all new installation instances of Windows OS default to having an Admin account with superuser privilege and one or more limited-privilege accounts for the user(s) to do their daily work.”
It doesn’t do that. It only forces you to set up one admin account when you first set up the machine. Any other users you add after that, whether they are manually added, or simply logged in through a network domain, default to standard users unless upgraded to an admin by another admin user.
The reason every user ends up an admin is because the standard users can’t do much of anything. They can’t install a printer, for example, or install an ActiveX control that you might need to work on some web app. So, people end up upgrading all users to admins just to avoid the hassles.
“The reason every user ends up an admin is because the standard users can’t do much of anything. “
Exactly my point. And yet the default installation gives these clueless users superuser privilege by default.