“The most challenging thing in any security design is to find and maintain the right balance between security and the user comfort.”