Usability is not enough: Why users resist even usable security and privacy

I think this article was well thought out and insightful.

I believe that part of the reason security is so unpleasant to people is because it is so inconsistent. We are told we must be diligent at all times because we don't know where a threat will come from. We may take great strides to keep our Facebook secure, and neglect to maintain our Twitter. So our Twitter is compromised and we feel like we failed and security is pointless. Or we secure all of our platforms as best we can and then someone like Parler leaks all our personal data anyway. So we feel security is fruitless.

We jump through hoops to protect ourselves, and then our employer gets hacked and loses our SSN. Or a merchant gets hacked and loses our credit card info. So we feel slighted. We see these obstacles purporting to keep us safe, and when they fail we feel like they are a waste of time.

In life there is fault and consequence. Sometimes we must deal with the consequences of choices we are not at fault for. This is frustrating and makes the whole act of security sometimes feel not worthwhile. Like it is someone offloading responsibility onto us instead of taking responsibility or accepting liability themselves. We must protect ourselves because our benefactors cannot be bothered to do so.