Part of the fault lies with the security products. But as easily as NetWare passwords can be encrypted automatically as they travel over the wire, security can be made invisible to the user. However, you must demand it from your suppliers. The challenge of the vendor community is to develop security products that minimize the inconvenience of using them, while maximizing the security of th e system. The users aren't the only ones at fault.
Potential breaches lie within the domain of IS as well.
In one example Shimomura showed at the Internet Society confab, the Unix systems were compromised because the password files were left in the clear. Many security breaches occur because the system designers didn't think the security problem all the way through. As you design security into your system, you must think like your opponents. Imagine the ways in which your systems are vulnerable. Adopt Shimomura's language of war.