As a security practitioner I am skeptical about certs value ( CISSP, Sec+, CCNA Security, CEH) in infosec except for the offensive certs from Offensive Security

As a security practitioner I am skeptical about certs value ( CISSP, Sec+, CCNA Security, CEH) in infosec except for the offensive certs from Offensive Security. This because I know too many folks that have certs yet never mastered security basics, cannot code, cannot administer, cannot innovate/automate, cannot lockdown, cannot audit, cannot circumvent, and are generally dangerous around any type of IT. Fundamental ability to manage, develop code, or administer, are foundational in infosec, which is why most of our good talent comes from IT support, Networking, System Administration or Development. I think product certs are valueable though for reflecting experience in a specific field (e.g. CCIE/MSCE/AWS ), and process certs (ITIL/etc) for understanding how it fits together in a service mgmt context. Apart from certs though, an active Top Secret SCI with a full scope polygraph is worth its weight in gold for govt work.