I don't think the problem is specialization, just that the incentives mean that the specialization doesn't always get applied where it's needed. Presume a comp

I don't think the problem is specialization, just that the incentives mean that the specialization doesn't always get applied where it's needed. Presume a company with the budget to have a SOC, they're doing all the "regular" security jazz and them some. But are they auditing the network services they themselves run, or just applying patches? Auditing the products the company itself is producing, or just kicking the tyres? But they MITM all the outbound https connections, I'm sure that more than makes up for it.