I made this video years ago with a test system to make a point that security does not fully work.
There are solutions that work great, but the usual excuses always apply as to why people will not use them. The user doesn't know, the user doesn't want to know, the user wants to install a soft and be fully reliant upon it to protect the system, the user doesn't want to have to make a decision, such solutions are too much work, too inconvenient, blah, blah, blah.
Until the attitudes, expectations and knowledge of users changes, nothing will change. Software cannot solve those problems. No matter what technology is used. No software, that people are willing to only pay $50 or less for, can definitively solve the malware issue on a fully automated basis. At least not to most peoples' expectations.
People essentially want near-perfect security, but aren't willing to do all of the things necessary to achieve it - let alone pay for it.
And Windows is Microsoft's baby. That makes them responsible. They created it. And what they created inherently has a host of security issues. Microsoft is responsible just like a parent is responsible for their child.