I s'pose you could look at it that way, but activeX is more than just a liability, it adds a lot of possibilities, which unfortunately can be perverted by sociopaths. In my browser I can disable activeX globally, or on a per tab basis (along with scripting, java and flash), so I can use it when needed on sites i completely trust, and leave it off the rest of the time.