Hmm I don’t know… Users usually don’t pay much attention to security. And the disclosure method actively hides it from the user until it no longer matters.

For providers, I understand, but can’t fully agree. I think it’s a misguided culture that creates busy-work at all levels.