I completely agree with you. But in every field I’ve worked in getting actual good security implemented is usually diametrically opposed to end-user convenience.

As a side note what Element did with the verification icon-strings was pretty neat.