[digi_owl]

And others pile it on in the name of "user friendliness" or "security"...

[majewsky]

User friendliness and security are not the parts that are bad. "Piling them on" is the part that's bad. UX and security need to be considered from day one.