Instead of enabling exceptions when needed for custom set-ups, some users will opt for disabling all security functions.