one thing i've noticed about work is the more security you add, the less people actually pay attention. they assume the system handles everything and stop using their own judgment. and that's how you end up with a breach nobody saw coming because everyone was looking at the wrong thing.