I think the biggest change I like to see is locking out users on suspicious activity, instead of waiting for police departments to police their own.