It's unfortunate that "good UX" isn't really considered across all fields which have users. The recommendations to mitigate security fatigue are no different than any sort of user frustration:
1. Limit the number of ~~security~~ decisions users need to make;
2. Make it simple for users to choose the right ~~security~~ action; and
3. Design for consistent decision making whenever possible.