There's something about Windows exploits that just feels like a canned hunt by now.
With stuxnet, there developed the sense that Windows received conspicuous attention from a special class of mysterious operators.
At this point, given the tiny cottage industry that feeds a handful of starving security analysts, I feel it's reasonable to presume that Windows is built to be a secure as possible, and that what's possible is mostly intentional and understood as a known quantity for special populations.