At the point it puts users at more risk that not, I don’t see this as a step forward; not informing users of the risk of having iCloud enabled is one example.

For more of my take on the topic, see:

https://news.ycombinator.com/item?id=32006436