> Security measures always suck, are less efficient and cause no end of headaches, you mostly have 0 goodwill anyway. Isn’t your job to make sure security meas

> Security measures always suck, are less efficient and cause no end of headaches, you mostly have 0 goodwill anyway. Isn’t your job to make sure security measures don’t suck, aren’t less efficient, and don’t cause headaches? This seems to be a very defeatist attitude to take. From my personal experience one of the following happens when a security team takes your perspective: 1.) users work around security mitigations, causing worse security issues 2.) workers quit the company due to friction when working 3.) the security manager gets fired because they won’t ever compromise