[kevinmobrien]

With tremendous respect to Linus, this isn't a fair characterization of the "security community", whatever that means. There are both practitioners and vendors who take the view that security should enable business, not block it; there are groups of experts who run contrary to this, and believe in a reductive and restrictive approach to everything. The continuum of thought around what it means to be secure, especially when dealing with organizational security, seems to be shifting towards the former, rather than the latter.

As far as Linus' statements go, saying that security is imperfect by design isn't a new take on it, and I'm in complete agreement with you that it needs to be something that regular users can benefit from.