Many of the ideas seem good for a corporate/enterprise setup where you lock the system down to run a few business/tech apps, but not so pain-free for desktop users. I mean, nearly every app on my system needs access to the usual folders. Unless MS bundles a good whitelist of approved apps, granting permissions is going to get really annoying.
Akin to Windows SmartScreen and stuff, I expect Microsoft to offer the whitelist as a service. Obviously, they wouldn't want to cause extra headaches in getting Microsoft Office and the like to have access to your documents.
