Well there are other and far less intrusive ways to make sure everyone is running some kind of protection. For example set a date 2 years from now, where every single computer out there would send a message to the dns with type and version of whatever protective software running upon each first connect. While several computers of course would connect through same modem/router, logic would suggest, that if one is protected, most if not all probably are.