The stronger the friction of security measures, the more likely they are to encourage employees to find workarounds, expanding the scale of shadow IT.