Are Online Security and Convenience Fundamentally Incompatible?