[grifficious]

https://www.microsoft.com/en-us/research/publication/so-long... was an interesting paper by Microsoft on the rational rejection of security advice by users, on the basis that the costs outweigh the risk.

How much does this raise the bar of software security, and what are the costs?

User effort isn't free.