I really, really, hope that this is just a beta/release candidate issue... or rather a misconfiguration. Anticompetitiveness (questionable... things may break otherwise) aside, this is a pretty major security issue. I'm not quite sure why DEP (data execution protection) isn't catching this... again, hopefully default settings will be adjusted so that this won't be possible in the final version. I really, really hope so, otherwise we're back to the Windows XP security model.