It's the weakest. The pain you will feel from having to get your friends MAC address' every time someone needs to get on your network vs. the security. MAC address spoofing is hacker 101. Along with WEP protection. Just use WPA2 and forget about it. If they want in thy'll get in. If you need added security look into setting up a RADIUS server.