Agreed. Just like the prompt most folks ignore asking if a user is certain s/he wants to open some application that was downloaded. Really, I don't mean to imply that I disagree with your point about the Pavlovian threat, but I'm inclined to think it's better than the alternative of not requiring user permission (via password).