There doesn't seem to exist a good solution in computer security. You either strain the user, and then they will cut corners and make things less safe, or you s

There doesn't seem to exist a good solution in computer security. You either strain the user, and then they will cut corners and make things less safe, or you strain the business, and they will manage and outsource the liability to snake oil vendors (who will put undue strain on users and make things overly complicated thus extending attack surfaces, diminishing transparency and reasonability and putting, again, strain on users.)