i totally agree, however there is a very simple way to disable mass storage usb devices only, leaving other peripherals operational... example: http://www.techrepublic.com/blog/networking/disable-usb-storage-under-os-x-or-windows/297, or it can be done on a domain/policy basis with a windows AD...