Ironic huh..
That is one of the beautiful things about CIS though, it is fully customizable, you can alter how ever you wish to protect your system. Making custom rules, removing things not trusted nor needed. This of course takes an advanced user to do so. I still believe CIS is not intended for average users period, no matter how much they "simplify" the GUI.
For free, it is good protection. If one can afford security, i would opt to advise them to do so, but if not, CIS will keep your system safe if you take the time to learn it.