Regarding your last sentence, I think that’s true for, well, basically the entire world. Our security sucks in general. Humans aren’t as mean as they seem, or maybe they just generally suck at it.
Oh that’s neat, I did enjoy it. Thanks. It makes sense to me. Lying is work. Humans usually take the easiest path. Sometimes lying is less work than actual work and then humans lie.
I was only expecting something like OTP enforced by bank (not a choice by customer). Yes, I get the SMS / insecure transport problem, but other countries do this.
> Our security sucks in general.
Don't forget to account for physical enforcement.
Oh I don’t. All digital security problems are eventually physical security problems.