You can't guarantee security of anything, ever. But that doesn't mean you shouldn't try to prevent attacks. Of course timescales and assets are important. For

You can't guarantee security of anything, ever. But that doesn't mean you shouldn't try to prevent attacks. Of course timescales and assets are important. For the movie streaming industry, it's a certain number of months before and after a stream is publicly released. After sales have been made, there are diminishing returns when trying to protect the content. > I think it's wishful thinking that the technology you are relying on won't be broken in a one-year timeframe It depends on what your assets are, your threat coverage and who you are trying to protect against. Some people are successful at doing this for more than a year's timeframe, which is enough to be overall successful. If you're developing something as popular and precious as an iPhone, it's far more challenging. Nothing lasts years. The economical side of security is always to reduce the likelihood and impact of threats until they aren't worth worrying about.