True but at least prompting the user could help insure they at least decide what if any security works best. Assuming finger print or not at all is rather weak. But at least those who pay attention can remedy that after the setup is done.