It is designed specifically to allow anything to be installed, including potential badware. For this reason, you can choose to lock out other users from using “Off Mode” in order to protect the computer from unsafe installations or to enforce software installation policies. This is designed for the corporate environment.