I see a significant difference between making a security feature available but opt-in during a teething phase, and removing the feature altogether. Am I missing something?