an optional extra level of security that the admin can require users to agree to each time they select "reply to group"?

That would be a PITA. In our group (and perhaps most groups?), the default is "reply to group."