Users are generally used to closing dialogs without fully reading them, especially dialogs they did not expect because they wanted to eject the drive because they want to leave now and are already running late.
I don't think anyone would hit next then that red format button instead of the cancel button by mistake and if she does that person really deserve her data to be destroyed.
