I think people tend to use the analogy of a house and a computer far too much and it is largely inaccurate.I think if your machines are not connected to the internet than you can leave them as insecure as you'd like and if someone gives it to you while your bent over so be it, but in todays cyber world computers are not passive 'houses' just waiting to be rummaged through by some burglar they are actively participating in a medium shared by others around you. I am not free to park my car in the middle of the freeway(I dont think you can in Canada either but I'm not sure ) because other people use it too. I can park my car in my driveway and set it on fire if I want because that will not affect other peoples usage of the highway systems. People have to realize that their systems will interact and effect the systems of others on the internet and some sort of responsibility has to be assigned to those who use this medium. If I drive my car into a storefront, I will be held accountable. If my dog bites someone on my street, I will be held accountable. If I set my computer on the internet with no security and its used to compromise a business and cost them millions of dollars, I just shrug and say "Geez, Microsoft sucks." Granted, I dont think someone should be held criminally liable in this situation but I think they should be held accountable in civil court and should pay the damages if it can not be shown that the owner did not attempt to protect sensitive data, or the usage of his system to access data/systems belonging to his clients or others from misuse and/or neglect. Do like Mr.Redfoot says and "put a leash on that puppy".

-Maestr0

EDIT: Cheers Tony for another good find.