Security in Vista was usually only bypassed by users who allow anything to install just to get rid of the security confirmation.
Spyware only installed because users weren't careful with their search and download habits. Gotta love those kids who download the little icons, cursors, wallpapers...