Disabling AutoRun is indeed a security practice used to prevent the automatic execution of programs specified in the autorun.inf file. This helps to protect systems from malware that might be present on removable media, such as USB drives, by not allowing programs to run automatically upon insertion of the media. It requires users to manually open or execute files, which adds a layer of security by giving the user the opportunity to scan the media for threats before any code is run.