How did we get there? By ignoring human nature and geeking out about the technical side of things? It doesn't matter how technically advanced and theoretically

How did we get there? By ignoring human nature and geeking out about the technical side of things? It doesn't matter how technically advanced and theoretically secure an auth solution is. If it has certain kinds of usability problems it will never be willingly adopted by large number of common people. I think to move forward with security we (engineers) need to simply accept this as a fact, and stop bitching about supposed user stupidity.