Usability always seems to lose to security. Then we complain that the users can't use the system. I have come to think that every decision of this sort should

Usability always seems to lose to security. Then we complain that the users can't use the system. I have come to think that every decision of this sort should first be an attempt to increase usability. Security is ultimately about usability. They are not actually at odds. Too often there is no analysis done after a potential security issue is identified past directly resolving the issue. Rarely will there be an attempt to reevaluate the usability after the change.