On the other hand, semi-protection means that only checkusers can track down who did the vandalism. IP editors can be named 'n' shamed (as far as their internet origin goes, anyway). Logged-in vandalism is much more private for the vandal.
I'm inclined to support semi-protection even so, since it cuts down the rate of drive-by vandalism, but the point's worth making.
-Matt