This may not not a popular opinion, but this honestly comes across to me as a sad rant that has nothing worthwhile to say about security. Consultants get paid

This may not not a popular opinion, but this honestly comes across to me as a sad rant that has nothing worthwhile to say about security. Consultants get paid to come in and advise, and internal staff are ignored? Suck it up, it's not a problem particular to security. I've seen it everywhere. People don't choose hospitals because of their security program? Well, duh. They don't choose hospitals for all kinds of non medical reasons that are still vital for the damn thing to function. Get back to me when you're in surgery and the whole hospital goes down in a ransomware attack. Honestly, if I had to listen to this person on my team for more than 10 seconds, I'd be on the phone to Deloitte before you could blink.