>makes me feel like this is an out of touch, logically-bankrupt security regime we're trying to foist on the world

This seems like a recurring theme. Other examples:

* default app sandboxes that don't let desktop apps see your home directory or talk to other apps

* browsers locking people out of websites with self-signed SSL certificates, while completely unencrypted websites get a pass

* Bitcoin / "smart" contracts which remove the possibility of human intervention when a transaction goes wrong

* The perennial insistence that using 'sudo' for everything is not just safer against mistakes but actually more secure than just running as root - as though an attacker gaining access to a sudo-enabled account wouldn't result in immediate pwnage anyway

* Having to take our shoes off in airports