Yeah, so that's what the IE development blog said recently: IE in XP SP2 stops all currently known critical exploits, so it's a heck of a lot more secure than pretty much any other browser. Well, that turned out to be nothing ...
You can find the original article on heise online news here.