@saraislet My general opinion is that systems need to be designed to account for the fact that they're used by humans. We have very predictable failure modes that must be accounted for - trying to get us to change our behaviour to be "more secure" is like nailing jelly to a tree.