The gap between security strategy and engineering reality

There’s a moment I keep seeing here and there.