The Droid Charge has a similar problem (and borderline security issue) where plugging the phone in automatically pulls up the SD card contents regardless of whether or not a PIN/whatever is set. Call it a Samsung "feature".
The only way around that was to turn off automatically mounting the card and make it ask you each time. But this... you'd think unchecking MTP would do the obvious.