'Acceptable risk' is an oxymoron to some security people.

Unattended PCs represent the computer security equivalent of low-hanging fruit. The excuse [that] 'Someone else must have sat at my PC' has become...typical.