In my experience, this could be said for virtually every security feature, particularly when new to users. But I still find it worthwhile to fully/correctly imp

In my experience, this could be said for virtually every security feature, particularly when new to users. But I still find it worthwhile to fully/correctly implement security features even if they might not be correctly used. Many correct security features have gradually become commonly understood in most communities to everyone's benefit, while most short cuts have eventually caused major problems that are made doubly bad by reputable firms having invested in training users to accept a solution that could only be implemented in snake oil.