Only _real_ (stop-gap?) solution I can think of is doubling down on security investments, both by expanding the number of people looking at security and on thin

Only _real_ (stop-gap?) solution I can think of is doubling down on security investments, both by expanding the number of people looking at security and on things like penn testing. Or are these not enough?