I spend most of my working life inside the mahogany skeletons of pipe organs, surrounded by thousands of lead and tin whistles that haven’t changed their fundamental design since the 17th century. It is a world of mechanical honesty. If a note doesn’t sound, it is because a tracker has snapped, a wire has bent, or the wind chest has developed a leak. There are no “error 404” messages in a 1920s Casavant organ. There is only the physical reality of air and wood.

Lately, though, I’ve had this Thai pop song stuck in my head-Rak Tid Siren. It’s a frantic, catchy thing I heard in a taxi while navigating the humid chaos of Sukhumvit Road. The chorus mimics the pulse of an ambulance siren, a sound that is supposed to signify an emergency, a moment of high-stakes intervention. But in the song, it’s just a beat. It’s a rhythmic background to a dance. And that, I’ve realized, is exactly what we’ve done to the concept of digital safety. We have turned the “emergency siren” of verification into a background beat that we no longer hear.

The Logging of Digital Entities

I decided to run an experiment last week. I am an obsessive logger-it comes from years of tracking the humidity shifts that make an organ’s Great Division go out of tune. I tracked every single time a digital entity asked me to confirm, consent, verify, or acknowledge something. By Wednesday afternoon, I was at 84. By Sunday night, the total was 147.

One hundred and forty-seven times in seven days, I was stopped. My bank wanted to know if I was really me. My email provider wanted me to “review new privacy terms.” A recipe website for a simple Khao Soi paste demanded I “Accept All Cookies” before I could see how many shallots I needed. A news site wanted to know my location. My phone wanted me to “Update Apple ID Settings” for the third time in a month.

Each of these 147 interruptions was designed by a person-likely a very intelligent, well-meaning person-acting in isolation. The bank’s security team was doing its job. The recipe site’s legal counsel was doing its job. The software engineers were checking their boxes. But nobody, at any point in the chain, was responsible for the aggregate experience of being Alex T.J. trying to live a life.

I have to admit something here. I used to be a “friction” evangelist. Five years ago, I wrote a fairly scathing letter to an organ restoration committee arguing that we should install digital PIN pads on the console blowers to prevent unauthorized use. I thought friction was the same thing as security. I was wrong. I was deeply, fundamentally wrong.

What I learned-after watching a confused organist fail to start the instrument during a funeral because he’d forgotten his four-digit code-is that when you add enough friction, people don’t become more careful. They just become more resentful. Or worse, they become automated.

We have trained an entire generation of humans to become “Click-Through Phantoms.” Because the volume of consent is so high, the actual cognitive attention paid to any single consent form is near zero. We have manufactured a world where “Security” is a chore to be bypassed rather than a wall to be respected.

That visual transparency is a form of protection that doesn’t require a “Yes, I Agree” button. It’s an organic verification. It’s the difference between me telling you an organ pipe is in tune and you hearing the C-major chord ring out clear and true through the nave. One requires faith in a system that is constantly badgering you; the other is just… evident.

The Dashboard Delusion

The irony is that as institutions build more “safeguards,” the individual bears the entire weight of the complexity. We are the ones who have to manage the 147 prompts. We are the ones who have to remember which of our twelve “security questions” used our mother’s maiden name and which one used the name of a first pet that died in 1994. The institutions don’t feel the weight; they just see a “completion rate” on a dashboard.

There is no “Department of Human Attention Span” in the government. There is no “Minister of Not Being Annoyed” in the corporate world. Complexity accumulates across institutional boundaries, and it is borne entirely by individuals who have no representation in the meetings where these hurdles are designed.

I remember tuning a particularly stubborn reed pipe in a church in Nonthaburi. The air was thick, and the pipe kept “speeching” poorly-it would stutter before hitting its note. I realized that a previous tuner, in an attempt to “protect” the reed, had installed a small felt damper that was actually choking the vibration. He had added a protection that killed the purpose of the pipe.

Our digital life is becoming that stuttering reed. We are told these steps are for our safety. “We’ve detected a login from a new device.” Well, yes, it’s my laptop. It’s the same laptop I’ve used for three years, but I’ve cleared my cache, so now I am a stranger again. I have to find my phone, wait for the SMS, enter the six digits, and “trust this browser.” By the time I’ve done it, the thought I had-the piece of music I wanted to research or the bill I wanted to pay-has often evaporated.

This “Safety Tax” is a drain on the collective human creative capacity. If you take 147 interruptions per week and multiply them by three billion internet users, you are looking at an astronomical theft of human presence.

And for what? Does it actually stop the sophisticated hackers? Most security experts will tell you that the biggest vulnerabilities aren’t solved by making Grandma click “Accept” on a 40-page GDPR notice. They are solved at the infrastructure level. But infrastructure is expensive and invisible, whereas a pop-up window is cheap and highly visible. It’s “Security Theater,” and we are the unwilling audience, forced to participate in every scene.

“The ‘verification’ is happening at 30 frames per second. It is continuous. It is atmospheric. It doesn’t require the player to stop and solve a CAPTCHA of fire hydrants.”

In the casino industry, specifically the Thai-facing live dealer sector Gclub operates in, they’ve had to find a balance. If you make a player jump through twenty hoops to see a baccarat table, they will simply go elsewhere. The “protection” there has to be built into the visibility of the act itself. When a player watches a dealer shuffle a deck through a live camera from a Poipet floor, the “verification” is happening at 30 frames per second. It is continuous. It is atmospheric. It doesn’t require the player to stop and solve a CAPTCHA of fire hydrants.

We need more of that “continuous verification” and less of the “interruptive” kind. We need systems that are designed to be played like an organ-where the feedback is immediate and the safety is built into the craftsmanship of the wind chest, not added as a padlock on every key.

The Siren’s Exhaustion

I think back to that song, Rak Tid Siren. The siren is an emergency, but when everything is an emergency, nothing is. If every email is a “security alert” and every website is a “privacy risk,” we eventually just stop caring. We click the blue button because it’s the biggest button. We enter the code because it’s the only way to make the screen go away.

We have been trained to be vulnerable by the very systems meant to protect us. By making us habituated to clicking “Yes” without reading, the “Safety Industrial Complex” has created the perfect environment for actual malicious actors to hide. All they need to do is look like the other 146 interruptions we’ve already ignored this week.

Yesterday, I finished tuning the organ. I packed up my tuning slides and my hammers. I sat at the bench and played a simple hymn. There were no prompts. No verification. Just the physical connection between my finger, the wooden tracker, the air valve, and the pipe. It was a rare moment of being “unprotected” by digital layers, and in that moment, I felt entirely safe.

We are losing the ability to trust the world because we are too busy consenting to it. It is time for a radical simplification-not because safety doesn’t matter, but because real safety requires a level of attention that we are currently squandering on a hundred different “I Agree” buttons.

If we want to reclaim our digital lives, we have to demand that institutions stop thinking in isolation. They need to start asking: “What is the 148th click going to do to this person’s soul?” Until then, we’ll just keep dancing to the siren, clicking our way through a world that is so “protected” we can barely breathe in it.