Frankly I never expected DEP to be the panacea some said it was and I expected it to be flawed. Not because M$ wrote it but because you are messing with the most complex area of the computer. The question really becomes "are there enough, sufficiently skilled programmers out there that have malicious intent to find it's failings and exploit them publicly"?

Honestly, I don't know the answer. But I do know that I have survived in this world for more than 20 years without it and can probably continue to do so if I pay attention to the threats and mitigate their vectors. I work from a fairly basic principle since I'm not smart enough to know the "nitty-gritty" of everything my users and myself use - "If you can't get the code onto my box you can't run it... Period"... It works for me....