As I type, “If a message about permissions appears, click ‘allow’” into a SharePoint page with an embedded Power App, a tiny #infosec angel appears on my shoulder to plead that I edit it to ask the user to *review* the permission request before clicking.

A #UX devil appears on the other shoulder. “Everyone has already been trained to click ‘Allow’ and ‘Yes’ over and over again just to do their jobs,” he says. “It’s a shame that you have to put any instructions. Don’t make them LONGER.”