[saraid216]

It's a meaningless buzzword clickbait. You can't denigrate "list thinking" and provide a 10-point list as your response and expect to be taken seriously.

The actual point Lambert seems to be making is, "Recognize the existence of security dependencies between your assets." I wouldn't be terribly surprised to learn that there are a number of security professionals who fail to do this, but I'm not surprised to learn there are well-paid programmers who can't do FizzBuzz either. It's not a useful thing to point out unless most of your audience isn't already aware.