If a user has not installed necessary patches, the LUA will not protect as it should. And spyware, keyloggers and other malicious events can occur.

Boy, I wish I had a 100% solution. Thank goodness I never said I did.

Logical layers and software layers sound good together...after all, multi-prong security is essential.