Anyways, there’s a real friction between great UX and great security, and I can appreciate a lot of the challenges and compromise required to strike a balance.

The UX is currently hard.

There is often websites that have "bad" UX as listed in the post. The majority starts to have the "better". The "best" does not exist yet.