Ultimately this is akin to password requirements. They are a bother but the average user is just much too careless to be trusted with their own security.