The problem with arguments by security experts is that they ignore the reality of ergonomics and convenience. If you're in security and you ignore these, you're

The problem with arguments by security experts is that they ignore the reality of ergonomics and convenience. If you're in security and you ignore these, you're being naive and likely making dangerous recommendations. Why do I make this claim? Because if you were realistic, you'd acknowledge that people will inevitably choose the easy route over the secure route. The path to genuine improvements to common place security has to include a focus on methods that are ergonomic and convenient. Just look at the outdated password complexity rules as a perfect example of this. Sure, in some ideal world where everyone did the hard thing this would be secure. In reality these rules just drove people to write their passwords down on sticky notes under their keyboard. Signal in the current form is not and will never be a replacement for email due to UX. It's a great messaging platform, but it doesn't solve the use cases that email does.