Article is fairly similar to my experience- infosec uses up all their goodwill by appearing inflexible on everything before we get to any important points.  One of my (admittedly minor) examples: insisting that passwords dialogue boxes be obscured in all situations even in a private office and even if it breaks disabled input abilities and affordances.