Security risk is an artifact of specialization. If you build a complex business or system, the greater the degree of specialization in its constituent parts, th

Security risk is an artifact of specialization. If you build a complex business or system, the greater the degree of specialization in its constituent parts, the more security risk you need to manage between them. It's that simple. The made up nonsense names for invented problems are basically meaningless woo at this point. We could autogenerate security risk names and descriptions with fridge magnet words with a reasonable degree of accuracy, because the underlying cause is the externalization of risk from the gaps created by the internal incentives of integrating specialized functions. It's not that all security is necessarily bullshit, but threats and risks that don't acknowledge this inevitable reality are. It's functional integration risk. This is funny, but when a world salad ML script can generate plausible products, the field needs to pause and reflect on what it actually does.