I think part of the solution is to get security teams to recognize that good user experience is a part of secure design. If the interface allows users to make m

I think part of the solution is to get security teams to recognize that good user experience is a part of secure design. If the interface allows users to make mistakes that compromise security then the software has failed. You can blame users for making mistakes and tell them to read book-length manpages but that doesn't solve the problem. Most users don't want a swiss army knife and directions, they want a complete solution to a specific problem.