I've seen this more formalized as a triangle, with "functionality" being the third point: https://blog.c3l-security.com/2019/06/balancing-functionalit...

You can get secure and easy-to-use tools, but they typically have to be really simple things.