That's not entirely true. Adding too much discomfort to users reduces security by encouraging people to workaround or otherwise undermine the system. Many of th

That's not entirely true. Adding too much discomfort to users reduces security by encouraging people to workaround or otherwise undermine the system. Many of the best security practices ideally make doing the secure thing easy. When this is not possible you have to try to at least limit the discomfort caused and make it resistant to subversion by even trusted individuals.