16  Debate: Security vs. Usability Trade-offs

Two Worked Scenarios Plus a Constrained-Device Encryption Check

authentication
security
vs
usability

Each scenario below trades security rigor against usability, cost, or engineering constraints — work through the discussion questions before checking your reasoning.

16.1 Security vs Usability

Discussion Prompt

Scenario: A smart home company wants to add two-factor authentication for remote access. In the scenario research notes, many users abandon complex setup flows.

Dilemma: How do you balance security with user adoption?

Options to Debate:

  1. Mandatory 2FA with guided setup
  2. Optional 2FA with strong defaults
  3. Risk-based authentication (2FA only for sensitive actions)
  4. Hardware tokens included with purchase

Each Person: Pick an option and convince the group.

16.2 Open Source vs Proprietary Firmware

Discussion Prompt

Scenario: You’re choosing firmware for a new IoT product line. Budget allows either: - A) Open-source RTOS with community support - B) Commercial RTOS with vendor support contract

Debate the Trade-offs:

  • Security vulnerability response time
  • Long-term maintenance costs
  • Regulatory compliance evidence
  • Talent availability
Knowledge Check: Constrained-Device Encryption