But his analysis applies even to highly technical users, for whom the problem is clearly not understanding. The reality is I had an argument about why we shoul

But his analysis applies even to highly technical users, for whom the problem is clearly not understanding. The reality is I had an argument about why we should be writing down passwords at work, because the projected security benefit of preventing a full breach is still less than the expected benefit of not losing our data all the time. Could we have set up a better, more technical PKI than notes in the safe? Probably. But I'm not sure it would get us ahead on the cost/benefit curve. Real security is about separating your porn watching from your banking; not about doing your porn watching to the security standards of your banking. tl;dr: No, dancing pigs are always more amusing. No one wants to live in a perfectly safe box.