I feel like you missed my point. To be slightly more explicit, I find it comical how willing security people are to build a "secure" product that's completely useless for getting work done.