Who said security was a "very simple process"? It is of course up to people if they want to enable additional security and of course have to put up with increa

Who said security was a "very simple process"? It is of course up to people if they want to enable additional security and of course have to put up with increased friction and difficulty. Myself I consider what would it mean if someone got access to my Github, Gitlab, and/or email accounts and have decided that I will put up with the cost (buying U2F tokens) and hassle (having to use the U2F token to login). The alternative is the much higher chance that someone could at some point get into one of my accounts.