Computer security (computer system quality in general) can't really be turned into a metric, which means it can't be understood by bureaucracies, which means it

Computer security (computer system quality in general) can't really be turned into a metric, which means it can't be understood by bureaucracies, which means it can't be valued and upheld by large public or private organizations, which means it's in shambles everywhere that well-intentioned engineers aren't upholding it out of their own personal (usually unrewarded) integrity Tale as old as time