That's a somewhat narrow definition of "security." The 3rd component of the CIA triad is often overlooked, yet the availability is what makes the protected ass

That's a somewhat narrow definition of "security." The 3rd component of the CIA triad is often overlooked, yet the availability is what makes the protected asset—and, transitively, the protection itself—useful at the first place. The disruption is effectively a Denial of Service.