One thing I want to point out is both SQL CLR and Web Services are off by default when you install SQL Server. I don't want developers out there saying, oh, my god, is this on by default? What if a virus comes along or anything like that? You do have to explicitly turn it on, both the CLR and the Web Services support. We are making sure that it is very secure out of the box.
Ok, secure out of the box... by turning it off! Very nice, maybe I should turn off my Windows XP machine to make sure it is secure as well. :)