Really though, if we're talking about "completely secure" computers, or even something approaching that, no one can be trusted to keep any system secure. So why not at least let users have some freedom while taking care of the most obvious exploit routes?