tl;dr - work at smaller companies in less regulated industries I'm a PM for security at a CI/CD company, and adding "friction" comes up as a feature request in

tl;dr - work at smaller companies in less regulated industries I'm a PM for security at a CI/CD company, and adding "friction" comes up as a feature request in 50%+ of calls with customers and prospects. As companies grow to a certain size, as a practical matter you can't trust employees to not do bad things. Also, in order to win more business you have to comply with more regulations. Access controls, separation of responsibilities, etc. Restated, one person's friction is another person's compliance.