There are two kinds of cryptography in this world: cryptography that will stop your kid sister from reading your files, and cryptography that will stop major governments from reading your files.

The user's going to pick dancing pigs over security every time.

Hardware is easy to protect: lock it in a room, chain it to a desk, or buy a spare. Information poses more of a problem. It can exist in more than one place; be transported halfway across the planet in seconds; and be stolen without your knowledge.

Chaos is hard to create, even on the Internet.

If someone steals your password, you can change it. But if someone steals your thumbprint, you can't get a new thumb. The failure modes are very different.

We can't keep weapons out of prisons; we can't possibly expect to keep them out of airports.

Technical problems can be remediated. A dishonest corporate culture is much harder to fix.