There's no reason that has to be insecure (depending on your definition of "secure"). There's also no reason the user shouldn't be allowed to make that choice for himself.