I don't get this. I mean, it's ok to have an option to install untrusted code off by default. It's even OK to bury it somewhere in "advanced settings". But after that, I think you're done your due diligence in protecting me from myself, and anything beyond that is impeding, not protecting.