The noob factor does effect the security program's effectiveness. If you have someone using CIS for the first time, as dieselman pointed out, they will not know what they're doing and enable stuff that should be enabled. They could allow a trojen access to the net and so forth. This would pretty much defeat the purpose of having Defense+ in the first place.
