Why does the Admin password have to be required?
It's just another password to remember.
In real life, once we have the authorization to do something, we aren't asked again and again whether we really want to do that...
Johnny has a driver's license. Johnny has a key to the car. The car doesn't ask for another key if Johnny wants to stop and get gas. "But he might put diesel in the tank and ruin the engine!!11"
Verification checks can be done differently. Make users enter a simple PIN or something, but don't make them logout and login or other mumbo jumbo in the name of "increased security". "But a PIN is just another password!" Kinda, but kinda not. We're being forced to go to complex 15 character passwords... :-/
I understand the arguments on the other side, and servers and airplanes and rockets are different. Granny's PC doesn't need the same kind of security as a nuclear missile.
I know that my annoyances aren't going to be addressed anytime soon. But things can change.
My $0.02.
Cheers,
Scott.
