I'm happy to complain about Windows, but I will say their progress in converting their ecosystem to user-by-default with elevation prompt warnings has been impr

I'm happy to complain about Windows, but I will say their progress in converting their ecosystem to user-by-default with elevation prompt warnings has been impressive. Especially when they had to drag their developer community kicking and screaming to it. (in Windows Vista ~2006) Afaicr, there's also a neat bit where the lock screen and UAC prompt actually run under an entirely different, privileged and restricted session (than the normal one the user is interacting with and running programs in). Ref: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/user-account-control/how-it-works#securing-the-elevation-prompt https://learn.microsoft.com/en-us/windows/security/applicati... Apparently now termed the "secure desktop", it's transparently overlaid on top of the user desktop whenever you see a prompt.