Advanced users don't use HIPS. People use HIPS in order to look like advanced users. Once you are advanced enough to understand HIPS properly, you know how you can get infected, which threats apply to you, what you need to do against it, and finally you realize you don't actually need it anymore or never needed it in the first place.
I use the HIPS as a stand in "cover" for some of the weaknesses of Comodo Firewall. The input is helpful with questionable apps when the app or the functionality in the application is something required at the time. Mostly, the alerts give an indication for me of what the specific app would like to be able to access, and knowing I can watch the app if necessary.
Kind of sounds like you are saying that what the advanced user needs is the same as what the noob needs. Don't take this the wrong way, because it would be great if it were true at this time. For me, security software has a little ways to go before I'll count out old fashioned HIPS. I think more clever presentation of threat potential (on alerts) is needed and then more clearly understandable security options packages or package choices. Example is Comodo's Internet, Firewall, and Proactive options. There isn't much clarity to the choice in the deepest sense. New Comodo user ends up taking Comodo's word for it with the default or choosing based on someone else's experience and or advice.
Also, there are different levels of noob or non-advanced, when it is taken into consideration that some users focus hard on a limited set of applications and then may switch. Essentially, they become a noob all over again even if a noob with good knowledge.
