In 1953 a lead physicist lost the project of the H Bomb on a train
physicstoday.scitation.org
physicstoday.scitation.org
It is not obvious what is the best, but the fact that he was required to carry the envelope with him at all times was itself a huge risk.
At least I forget things like that 10 times/day, but I guess I am a walking security hazard in lots of ways.
Maybe it would have been better to leave the letter anonymously in the suitcase?
To continue my thinking... the analogue here is password renew policies. A well meaning and locally reasonable rule, actually leads to worse security.
Original submission title was a little hard to parse.