Security burnout: Avoidable or inevitable?