What's on offer here is the ability to exclude a large class of attackers entirely - script kiddies with a commonly available file explorer tool. Sure, if you'

What's on offer here is the ability to exclude a large class of attackers entirely - script kiddies with a commonly available file explorer tool. Sure, if you're the CEO of some big company and a skilled attacker really wants at your email, this is only a stopgap - but this is also sufficient to stop less proficient attackers entirely. For most people this is all they need. > "it's more like telling bicycle riders to use anti-puncture tape." If anti-puncture tape has literally no downsides whatsoever to the bicycle rider's experience, and costs nothing, then yes. Why wouldn't you have it?