> > As an industry we’ve failed all horribly at making secure the easy default option. > This will never and can never happen. Security and sharing are at odds

> > As an industry we’ve failed all horribly at making secure the easy default option. > This will never and can never happen. Security and sharing are at odds I don't think the GP was suggesting that products be made so secure to be functionally useless. There's a wide spectrum between completely open and completely locked down. But right now the gradient to go from open -> secure is so steep that most people aren't willing to put in the effort. For example, have you ever tried using OpenSSL to create a self-signed certificate? The defaults are probably not what you want. Adding on stuff like the proper certificate extensions is even more work. Products should be designed so that it's not a herculean task to add security when you're ready to take that step.