Matt, I think that's true of a lot of tools. Few have security baked-in in a way that leads/forces users to build something secure. Security is almost always something you have to know to do, rarely something you're prompted for. Imagine if every create table launched a security settings dialog - maybe the world would be a safer place!