Why does Windows still let arbitrary applications downloaded via email run? I'm sure the vast majority of cryptolocker victims have no desire to share binary ex

Why does Windows still let arbitrary applications downloaded via email run? I'm sure the vast majority of cryptolocker victims have no desire to share binary executables via email. I wish there was an "only run Microsoft approved applications" option I could enable for my parents. Kind of like OS X's Gatekeeper.