> I agree, but I'm also sure you would agree that a small window were things can go horribly wrong is much more preferable than than a perpetually open one (sudo and friends stand testament to this).

What's even more preferable is a situation where the kernel doesn't let you do the damage in the first place, which is what we have now.