The best cybersecurity is a good system of backups and system wipes. This is particularly effective with personal computers; for businesses, there is a need for robust anti-malware resources.
I'm just not seeing the need for a government solution when the private solution (firefox + noscript + avg, or just migrating to linux) works so well.
On that, I would think the thing to do is have the NSA see what they can hack, design something they cannot hack, and then inform Microsoft that they will make Windows conform to that standard, or Windows will not be used by any part of the US government.