Businesses don't exist to be secure, they exist to make money, and thus security will always be compromised. It's very easy to have a super secure IT system th

Businesses don't exist to be secure, they exist to make money, and thus security will always be compromised. It's very easy to have a super secure IT system that makes 0 money. IT teams generally are only going to value security to meet business objectives and protect their reputation. The unfortunate point is that often security is in the public interest but businesses don't act in the public interest.