Can you discuss your view on difference between (if any) a WSRP/JSR168 compliant portlet with a composite service behind it?

Our customers tell us that the 168/composite-app approach is code-intensive.  Fundamentally, that means the solution is difficult to share, to repeat and to build upon.  That also means that it is not user-driven.