Right, but is it really a pain point to the negligent web site owner who doesn't care enough to make sure it's secure - or is it more of a pain point for Google

Right, but is it really a pain point to the negligent web site owner who doesn't care enough to make sure it's secure - or is it more of a pain point for Google trying to determine what's quality and not?