Boot time

should I run boot time  protection?  The  default seems to be no