Everything after Windows XP had security at its core.

Blame the users who are clueless, that are emailing viruses to all their contacts, download Trojans and warez with backdoors, etc.

I also blame MS for having insecure configurations by default. It's possible to secure a NT system quite well but there were a lot of compromises made in the defaults for convenience.