I thought I did explain it properly.  At least for the developers.  Anyone that's written a few Windows Form/WPFapplicatios would know what I mean but I'll elaborate.

The default button on the UAC prompt is currently allow.  That means it is just a matter of hitting enter/space, or with a mouse driver that auto moves to the default button, clicking the mouse, to Allow whatever is being prompted.

I'm not clear if this is secure.  I haven't tried scripting something to automatically send a click or enter event x seconds after launching something that would cause the prompt to appear.

Either way, it would seem the safer option to have the defalt button be Cancel.

As things stand you could have a virus/trojan launch whilst you're typing away and hitting the space bar or enter would click the Allow.