Separate the Security Policies differently for WHM and cPanel logins

As a web-hosting provider I would like to enable Security Questions & IP Restriction for WHM (root) only and not final cPanel users necessarily so that Hosting Providers can secure WHM & root access, without "annoying" final cPanel users with 4 security questions (if that users feel that too much security is not convenient for their case).

In addition to that, any cPanel user should be able to enable security questions (or not), by themselves ?

As a web-hosting provider, I think Security Questions is a must for WHM & root user (same as changing SSH port for instance). But I can understand some cPanel users complain about these 4 security questions. That's why I think, for cPanel users, it should be optional.