I brought this up late last year in the poorly used WordPress Ideas section - http://wordpress.org/extend/ideas/topic/built-in-security-features. Maybe I should have, but I never took my case to any of the WordPress mailing lists.