Well you know, security is a compromise. It's all about raising the bar for attackers while not penalizing too much regular users.