The performance aspect is necessary when managing optics with a whole nation's population. Plenty of people have no idea what good security looks like, but they expect it looks like a lot of steps and many inconveniences.

Corporations generally don't need to worry about this.