Hey, you're probably right. I'm not so sure the user should be making that decision though. Users would probably do away with strong passwords and automatic updates too, if they had the option. It's not their call, and shouldn't be.