It’s at least partially because no one wants to employ actual operations specialists. Instead believing that developers and security response folks are sufficie

It’s at least partially because no one wants to employ actual operations specialists. Instead believing that developers and security response folks are sufficient. But good, sufficiently staffed ops teams know how to build real defense in depth across the stack, don’t just blindly trust automated scanners or installers, and proactively improve security iteratively over time.