Well I just received delivery of two brand spanking new XP Home machines from Dell -- and guess what -- they came without security updates that are almost a year old.
No warning from Dell that they should be upgraded immediately and should not be connected to the internet until they were. All the talk that Microsoft has been putting forward about the good job they were doing getting OEMs to install recent critical patches is all bullshit apparently. I had to spend a whole bunch of time and bandwidth downloading and installing 40 MB worth of updates on each machine.
Mom and Pop buying these machines from Dell would have hooked them up according to instructions, connected to the internet and probably got invaded and taken over shortly thereafter.
Microsoft -- you have to do a better job!
And Dell shame on you!