those on controlled machines. That isn't the majority and it certainly isn't the user set that creates most significant security problems.

Again, UAC is a "security tool" that is annoying enough to the vast majority for them to rip it out..making it not only annoying but completely ineffective.