Yes, and I would say that might be a good middle ground. I personally really like having the freedom to customize the software I run on the device. However, there's always the security question, and it's true that not being able to run unsigned ring 0 code is a powerful security feature.