I second this, it forces security by default (at least keeping devices from being directly exposed)