The material describes security as a trade-off.If controls are too burdensome, users may work around them by writing passwords on sticky notes, disabling VPNs, or using personal devices