Please forgive my ignorance, but if a site like google can disable this feature, doesn't that mean a malicious web site will be able to disable it too?

RE: Memo To Google: Stop Screwing with IE Security!