Anti-Exploit Protection software: another layer for Windows?

So, should we add another layer of protection to Windows? CrystalAEP, and “anti-exploit protection” product, thinks we should, and they make a good case. You can see their product at http://www.crystalaep.com/index.html. The idea is good: prevent drive-by installation or execution from the web, similar to the old Execution Prevention strategy of Unix gone by. Not on the approved list? Sorry, can’t execute!

The question is, does another layer of software make Windows any safer? Or is it just another mass of code to exploit, another product to keep patched? Good question.