Security models are constantly being re-evaluated as new threats and attack vectors emerge. What you said can be generically applied to every security control

Security models are constantly being re-evaluated as new threats and attack vectors emerge. What you said can be generically applied to every security control and which is why security is hard.