SECURITY IS A USELESS CONTROLS PROBLEM

Summary from the TLDR Web Dev newsletter

Many security controls are useless because they lack clear, understandable explanations. These controls often arise from compliance requirements or security "best practices" that don't consider their actual value.