Eight months and a service pack later, this huge IE security hole remains

Was that an all-clear we heard last month for Internet Explorer security? Don't believe it for a second. Unless you think you can avoid clicking on a hyperlink in an email...ever. Dan Appleman, a friend of Microsoft's although he's independent, explains this vulnerability clearly. I noted the vulnerability in January 2004. Windows Service Pack 2 is installed now (on both my XP systems as of this morning) and the vulnerability remains. My question is, why? And did Microsoft just miss its golden opportunity to fix it? And why on earth should anyone as knowledgeable as Dan expect millions of users to type in all URLs acquired from email by hand?