also is a security compromise.

Meh, security is always a balancing act with convenience. If you tilt too far towards security, your users will not be happy and they either won’t use the feature or abandon the platform altogether. Tilt too far to convenience and your users become a target.