So you think a person that would turn off UAC wouldn't just put NOPASSWD in the sudoers? I doubt that. And even if they had to enter their pwd... Wouldn't that just be annoying for the casual user instead of increasing security? I doubt they would be like "Oh I have to enter my pwd now, that really makes me think twice about whatever I was going to do with sudo."