security is getting to be worse than what is protects against. its a daily bane, especially for work stuff as everything is locked down extra hard
they tried to simplify it by tying everything to yubi keys, but just this week some things stopped going to the yubikey and wanted me to auth on my phone like we used to instead.
Letting an organization grab control of resources that do not belong to it, without the consent of the actual owners of those resources, is not "security".