It all depends on the skill of the user.
I couldnt agree more. I would have a heart attack if I walked in on one of my users with regedit open, but if they were running adaware...well Id have a heart attack anyway, but that would be out of shock and not pure horror. lol