...why not just remove the ability to run ActiveX controls altogether?
I've relegated IE to an antivirus app. How would I scan my hdd for viruses then?