Not only good security, but it also makes software updates a lot faster because you don't have to check if the user has randomly changed any system files before patching them.