i dont know why people who use an os on a home computer are concerned with security. unless you make yourself a target, visit hacker boards, or have something others want, i find the whole need for security to be rather pointless aside from basic firewall/anti virus/router/os tweaks (like disable remote administration services or secondary logon) that i do. way i see it im not running the cia here. if i get hacked the worse thing that can happen is i loose data, and backups render that point moot. also a service pack wont make all the holes go away. there will always be holes, ones the os devs make and ones you make with poorly informed security tweaks. my network is probibly full of holes.
that said any windows os (with the exception of windows 9x based oses and earlier) can be locked down tighter than a homophobe's asshole at a gay pride event if you know what youre doing. most of the security holes in windows in the past have been because of default configuration issues. it was too weak or the average user didnt configure things properly or listened to the advice his hacker "friend" who intentionally gave bad advice so as to use your rig's unused resources to host a torrent tracker. and then theres the whole social engineering aspects of hacking too. windows 7 is pretty secure by default.