That is a good start. Now, if they will disallow IE7 and IE8, we can get IE users back to a version that does not use ActiveX for plugins. That would be a great security step.