I agree - I often see companies offer security features for "premium" customers only. This is the wrong approach and I wish more services focused on security first and then price the premium features accordingly.
The problem is that security is often the feature that has the biggest gap between how much the end user cares about it and how much the IT buyer cares about it, which makes it perfect as an upsell.
