Of course you can standardize security. This means that the same authentication methods would be used across the industry, and the agents would be trained to n

Of course you can standardize security. This means that the same authentication methods would be used across the industry, and the agents would be trained to not leak those details through social engineering, etc. It would mean that there would be standards with respect to what information tier 1 agents have vs tier 2 agents, etc, with proper separation of duties, so that poorly trained tier 1 agents wouldn't have the ability to be socially engineered. Your method of security through obscurity simply doesn't work because hackers will figure it out and exploit impedance mismatches between vendors.