I've been thinking a bit lately about security overkill. This includes not just the notion of "security theater" -- security measures meant to inspire comfort by mere show of force/complexity -- but the many instances in which someone places a layer of security between me and my everyday activities with no apparent benefit whatsoever.
My bank would surely argue that its many and various anti-fraud measures are valuable but in truth a) they are meant to protect the bank, not me; and b) they are cumbersome to the point of ridiculous. It's gotten to where I can predict which credit-card charge will trigger the bank's idiot algorithm and freeze my account because it didn't like the Zip code where I used the card.
And security overkill has trickled down into the civilian world. When the class parents at my kids' school send out a list of parent contact info at the start of each school year, it comes via a password-protected Excel spreadsheet. Keep in mind this list doesn't contain Social Security numbers or bank information -- just names, addresses, and phone numbers of the kids' parents. I can imagine the day several months hence when someone actually needs to use the list and will find herself locked out by the long-forgotten password.