I also hope that CIS will stay lightweight and won't become bloated with unnecessary things. So I hope CIS will never do what Kaspersky did with it's suite
I actually like Killswitch. Having it in the suite would be not needed tho. Its a very nice tool to run it from time to time but 90% of people won't ever need it or know what to do with it. People who know about this tool will know where to get it.
A behaviour blocker would be nice (as addition to the HIPS). Web-protection maybe isn't needed as there is ComodoDNS.
Right now I feel very safe with CIS + Mbam pro (real + web protection) + Comodo/Norton DNS.
A whole sandboxie-like virtualization would be nice. But I guess it would have to be easier for usage than Sandboxie is. It is kinda annoying to have two firefox folders.. one on my realsystem and one in the sandboxie folder and also complicated for the average user.