It's not clear the user experience would have to suffer. Maybe there are more groups doing for software architecture what Signal did for messaging. Groups like Heisers' SEL4 and Qubes. As for expense, imagine how much more we would have paid today, in real and opportunity costs, if over the last 20 years everyone used this "no such thing a perfect security" fatalism as the excuse to not just do things a bit better.