My personal belief is that users should not be required type their password into random applications, terminals, and pop-up windows. Of course, login screens can be faked too.
So my main user account does not have sudo permissions at all, I have a separate account for that.
