Or find it inconvenient at some point and think "it doesn't matter that much, does it?"...

As is often the case, the human is the weakest link in the security chain.