Hey I wasn’t going to go there. 
Its pick 1, security or ease. Whatever is most important, go with that. You hit the nail on the head. Does not really matter if its harder, users will have to learn. If you gave someone the option of losing money through hacking or using a vpn, Id say most would take the vpn. I know this situation is not critical at all, just a good way to think these days. Breaches happen usually because security is to hard for a end user, so a company makes it easier, and that end user ends up getting hacked, not the company, taking the company with it. Security is only as good as the weakest link.