> Security people don't care about usability.

I spent a long time working in the network security field, and you speak truth. The perverse thing about it is that security people should care a lot about usability. If the scheme isn't usable enough, people will figure out how to bypass it or aspects of it.

The technically weaker security scheme that everybody accepts is more secure than the technically stronger security scheme that everybody tries to bypass.