@interfluidity If experience on the private side of IT has taught me anything, it's that users will sacrifice security for convenience every damn time.
Sometimes IT can push back. When the user is a non-tech-savvy general who doesn't want to jump through hoops to get critical information to his subordinates securely, though, I can easily see how shit like this would happen.