Security fatigue

People asked to make constant security decisions eventually stop making them carefully.

Every prompt, warning and confirmation spends a finite budget of attention, and once it runs out the responses become reflexive. That is a predictable consequence of design rather than a failing of the person, and the remedy is fewer decisions rather than more training.