That's a very pessimistic take. I think defense in depth works exactly as advertised: you need progressively disproportionate resources to mount successful atta

That's a very pessimistic take. I think defense in depth works exactly as advertised: you need progressively disproportionate resources to mount successful attacks, to the point where you need state-level actors/funding. E.g. modern cryptography works, the proof being that the UK wants to change the law to effectively ban it. We've commoditized e2ee. The next step is to commoditize secure software, so that the baseline effort for any attack is too high for less determined / funded actors. You will still occasionally have to face a stuxnet, but we shouldn't need to face another epidemic of cryptolockers.