Windows does not have the kind of capabilities I'm referring to.
With proper capabilities, the capability itself provides the authority. There's no need to have separate access control lists or some kind of central resource broker. Each process manages its own capabilities, can create new capabilities and can delegate them to others. And importantly, capabilities can always be revoked, at any time.
Everything in Windows is an object, on a centralized resource broker Ob.
Windows uses capabilities based access to enable fine-grained control. It is EAL4 - Methodically Designed, Tested and Reviewed.
This by itself doesn't prevent Windows from having security issues.