Security Is About Making the Safe Path the Easy Path

People take shortcuts under pressure.
Security that fights human behavior loses.

Good security:
works by default
requires no heroics
makes the right thing effortless

If security relies on perfect users,
it’s already broken.

Design for reality, not policy.

Secure systems succeed because they’re easy to use correctly.

– Serguey Asael Shinder