I'm about to install Lion on my new MBP13, using the Up-to-Date program, and have a question about user accounts. For Leopard and Snow Leopard (and probably earlier) the best practice recommended was to set up an administrator account that is separate from your regular daily use account. It's a bit inconvenient but is supposed to provide you with some added protection / assurance that apps can't get administrative rights without your explicit permission. Has anything changed on this? Is it still recommended?