Is there a reason only sits above the FilterSecurityInterceptor?

Why not put this further up in the order to catch other exceptions?

And if it's okay to do that, is there any way to do it with the namespace config, or would you need to use the bean config variation?