All too true. For example, to keep Zone Alarm running effectively, a rather sound knowledge of networking (and by extension, firewall concepts) is an absolute must, or else the user would be screaming in frustration.
Hence the reason a lot of users just dont bother. Firewall tech can be made only so user friendly, lest it become a joke of a program.