This is a weird phenomenon I've been seeing in some tech companies - getting rid of security ops people because technically you can link security to other BU's,

This is a weird phenomenon I've been seeing in some tech companies - getting rid of security ops people because technically you can link security to other BU's, like dev or even IT. Just looking at Mozilla, there seems to be a lot of security engineers, who are probably going to have to swallow this area of responsbility. Thing is that even in very mature organizations, preventive actions are not and are unlikely to ever be good enough to not have any need for detection / IR specialists.