[cortesoft]

Those are fine defaults, but why is it bad to allow people to explicitly opt out of this and do what they want? Other people being allowed to hack on their machine doesn't stop yours from being locked down.