[ericalexander0]

Security people will argue forever “defense in depth” this, “real world doesn’t match the study” that. Yawn.

Here’s the hard truth: cybersecurity today is basically fashion. It’s not science, it’s herd behavior. The industry is still running on the “nobody gets fired for buying IBM” mentality. Careers aren’t built on being right, they’re built on chasing whatever tool is trending on LinkedIn this quarter.

If studies like this mattered, then the security community would have paid attention to this study long ago:

https://er.educause.edu/articles/2005/1/fostering-email-secu...