I think there's a point though where people are so deep in it, they can't see the forest through the trees anymore. Security, as you mentioned, is definitely a

I think there's a point though where people are so deep in it, they can't see the forest through the trees anymore. Security, as you mentioned, is definitely a balance with what your users will actually want to do. Security experts see doomsday scenarios everywhere, but if their solution is a hassle, your customers will just go to the less secure competitor. I’ve worked with DBAs who were absolutely experts and knew far more than us but wanted to normalize the data to the point where actually retrieving it would have been a major hassle of JOINs. There’s a balance there that experts miss. "Experts" in my general experience often lack the big picture. They get so honed in on their little area of expertise that they can forget that people don't value what they value to the same degree.