I believe this deserves new thread.
How about option to define list of applications which are allowed to modify user interface of other applications, and of course if they or their components change firewall alerts you.
I am in this mode with maximum security enabled and all warning messages, and getting this alerts “Parent.exe has modifies the User Interface of Application.exe by sending window messages.” pretty often especially about explorer.exe, not like i want to disable this feature, just define applications that are safe to do it.