It's secure against everyone, including the user.

Windows could relax that part a bit if they wanted.