Exactly. It is a UX problem as much as a security problem.