A perfectly legitimate question! This certainly would fix MOST of the malware problems. It is only when the user can't be trusted to decide this by them self i.e they are tricked into install something bad.

Or it might be that the security reason, isn't the only reason for Microsoft to push this?