Users always have a way to compromise their own security, and short of taking away their freedom completely (e.g. putting them in a mental hospital) that's not

Users always have a way to compromise their own security, and short of taking away their freedom completely (e.g. putting them in a mental hospital) that's not possible to fix. Sacrificing human freedom in the name of security is a long, dark, and well-trodden path that I don't think we ought to venture down any further.