>With sandy, I was experimenting if you could get 80% of the security while still making it really easy to use

This seems dangerous. That 20% insecurity is still pretty large, but small enough it makes users complacent and gives them that false '100%' secure feeling, especially when coupled with ease of use.