Nice initiative, but don't bother end users with this, they are totally not interested. They won't even know what the are complaining about when they click that link in the popup. And when browsers start something like this, why not make more icons in the address bar, like not using proper SSL ciphers, not using DNSSEC or "this website includes 3rd party scripts" the webmaster should be ashamed about...