Often there seems to be a dilema in decision of a developer between "lowest common denominator" and "encouraging user doing it the right way".

Sometimes the first results in apps and services being junk digestible by everyone but violating security and privacy principles to a point where those developers shall be considered guilty of professional malpractice (example: SMS second factor where users/customers can get SIM swapped and lose money without compensation).

I am for whatever is the second option, within reason.

I do not know if my thought here is related to your question, as I do not understand the topic at hand well.