The law of diminishing returns applies to everything, even high-level data encryption, even though many security professionals wish it weren’t so. As social engineering (and high school) teach us, the weak point is always your personnel. Just ask xkcd.