The interesting bit is that it will be shipped as part of windows, out of the box. At least that's the impression I got from the dev in the hacker news thread. The same thread also noted that the UAC prompt currently identifies the triggering application as "Microsoft", which is true but misleading.

Yeah I read up on that a bit. After doing a quick dive into how it works, it's worse than I imagined :)