We've taken the approach to start with a baseline of common security features for all users, that will come with all plans. We understand that not all applications will want to require strict security features and for that reason we've made some of the more advanced features optional.