The decision should ultimately be up to the user.

This sort of subtle authoritarianism in the name of "security" is quite frankly extremely disturbing, and the companies are using it to force what they want by bundling plenty of other highly disruptive and completely-non-security changes too. I could go into a more political direction here, but looking at some of the other changes that have happened to society in general lately, I'm not surprised at all. Disappointed, but not surprised.