When security is important, over-secure is stupid. Currently, I spent lots of time to figure out an error message from Google Chrome when accessing a system which is set up by my coworker and is safe. It ends up that I have to play this inconvenient 'thisisunsafe' trick documented by this person:
https://miguelpiedrafita.com/chrome-thisisunsafe