Infosec advocates are super pro-R2R. You're confusing corporate lawyers who (falsely) claim their controls are necessary for security with being people with any

Infosec advocates are super pro-R2R. You're confusing corporate lawyers who (falsely) claim their controls are necessary for security with being people with any actual knowledge of infosec.