Complicated permissions system + humans != security
In just the same way that ordinary people (my mum, billionaire leaders of tech services, IT professionals included) don't or can't have a personal password policy which ensures security, the same people when faced with a multitude of questions when installing something will just press 'ok'.
It's precisely the same thing that goes on when we click the "I have read the terms and conditions".
Each time some failure of security results, there's lots of helpful advice on these threads about what people should do.
But they're as likely to do it as the pope is likely to convert to islam. So it does beg the question why we keep on building a tech world which doesn't work well with the way humans actually are, rather than some mythical alternative where we study password policy 8 hours a night and read all the legal small-print before ticking a box.
Biting the hand that feeds IT
