That's an absurd excuse for Ormandy. As, I'm sure Ormandy knows, IT pros are a LOT less likely to implement a workaround to this problem than are hackers likely to exploit it.

Furthermore, MS stated that the provided workaround is insufficient and easily circumvented.

And, he provides no evidence that any blackhats know about this at all.

To me this clearly looked like a way for Google to try to attack MS's security -- this goes hand in hand with their PR stunt of moving Google employees off of Windows due to security.