Security includes things like application security, operational security, secure development, secure documentation, pen testing, hacking, DDoS, and hundreds of other things. What we call “security” is really other things, and the real problem is rarely security, it’s something else, security is the symptom we can see, the real problem is less obvious and hard to see. We can give people food, but that doesn’t fix the real problem, it makes things better for a day or a week.