@dalias @alwayscurious @theearthisapringle @swordgeek True, although I tend to prefer to avoid making higher security much less usable than the status quo because you just risk ending up choosing a much less secure method instead.
Specially when a rather common attack vector is to induce stress.