Improving security is a classic 80/20 situation. Unless your job is nothing but security, you better focus on the impact first. This article is scaremongering

Improving security is a classic 80/20 situation. Unless your job is nothing but security, you better focus on the impact first. This article is scaremongering with the intent to market a product. The scaremongering itself is really not helpful to the education of the non-security or non-technical people.