I'm this scenario the "things the company may not feel is necessary" are good security practices and security fixes, right? I feel this is a good place to reit

I'm this scenario the "things the company may not feel is necessary" are good security practices and security fixes, right? I feel this is a good place to reiterate my "currently we sacrifice national security for the convenience of companies" argument.