Degrading UX to improve security hurts both UX and security

boringappsec.substack.com