@jerry I think some very technical people tend to talk more about technical issues that fascinate them instead of real practical security problems. These people usually also downplay the problems related to governance and management of security that are usually the main reasons for breaches, an not very technical security problems.