Microsoft's plans to ship the final public patches for Windows XP on April 8 could undo its hard-won reputation for security and hurt itself as much as the customers who end up with an infected XP system.