This is most easily explained by examples. Before: I'll get my clients to give me access to an S3 bucket that I can push their data to. Now: I'll make sure

This is most easily explained by examples. Before: I'll get my clients to give me access to an S3 bucket that I can push their data to. Now: I'll make sure I get my clients to give me a password or public key to encrypt their data before I push it to the S3 bucket because many people fuck up security on those things. To my end user, it's obviously more secure, but it isn't lining my pocketbook and most end users don't care about security, even if they should. Same thing with security headers or anything, really. Security slows you down at some point.