There is a quote that's been floating around Security Stack Exchange for a while that I like, it's called AviD's Rule of Usability:
"Security at the expense of usability, comes at the expense of security."
I think it's brilliant. I've see it several times where security has made things too hard and so people have just found workarounds that nullify all the security controls.
