I totally agree with you here. I did a subject related to this at uni and the first thing the said was,

"It doesn't matter how good your security is, if you don't have a firm and comprehensive...