Developers face a paradox in Infrastructure as Code (IaC) where the implementation of security measures disrupts their workflow, leading to frustration and reduced productivity. The article discusses the need for a balance between maintaining developer flow and ensuring safety, suggesting strategies like early misconfiguration detection, automated policy enforcement, and ongoing compliance checks to create a more seamless integration of safety within the development process.