Matthew Garrett

The problem with all "allow anyway" options for any security settings is that most users don't care about security. They care that they have some task/job they want to get done, and they will answer "yes, bypass" to a big red "warning, answering yes will infect your computer with a virus that will steal all your money from your bank account" message in order to get on with their task/job. Security settings, for them to have any power at all to block malware, have to be default on and unable to be bypassed by the end user (because the end user *will* bypass them if they get in the way of whatever task/job they have to do right now).