It's been a truism in security that the less usable you make your systems, the more your users will work around it, thereby defeating the security. E.g. passwor

It's been a truism in security that the less usable you make your systems, the more your users will work around it, thereby defeating the security. E.g. passwords written stickies to defeat password expiration rules. There's a sweet spot for security for the average user, where it's secure but usable enough that the user doesn't attempt to defeat it. For users who are willing to put up with less usable systems, more security can be had.