I'm sure they tried. "they" are probably security engineers and in my experience such people have a very different idea of what makes good UX