That is indeed good security practice, but makes exclusions for user specific folders difficult.
You simply can't create exclusions for every username in the corporation!
What other option exists to exclude
C:\Documents and Settings\UserX\Some random file.
C:\Documents and Settings\UserY\Some random file.
C:\Documents and Settings\UserZ\Some random file.
Does v12.1 have the option?