I'd assume that people test there stuff on a local web server and not by opening the file as such. Anyway, that's not the point. The problem is that the user preference apparently doesn't get saved.
BTW, this should be changed from Windows to all platforms. It is inherent in the fact that the cookie exceptions are stored by host after stripping off the protocol, and file:// URLs all start with file:/// and so have no host name.