Well, having a form of (optional) password protection would be very very nice.

I think that's one of the features Bitcoin must get ASAP. Encrypting your wallet.dat and asking for a password / keyfile (only it should not be generated, so any file you have can be used as one, a-la TrueCrypt) upon each load.