I am playing devil's advocate here.
Is SP2 mandatory? And if someone just uses their computer for word processing, faxing, surfing the internet but NO downloading or opening of email attachments, then is SP2 necessary?
Not now, but as time goes on it probably will be. You'll know when, cause stuff won't work without it. OR if you're sloppy about security you might want it sooner.