oh my god!
a little birdy pointed me to this quote from a (verified) microsoft employee:
That’s a good summary, no corrections here. The bigger problem is that versions of Windows (prior to XP) should absolutely be firewalled from the Internet. They were designed for home / office networking and as such have a lot of services running “out of box” that are not suitable for the Internet.