Cybersecurity Isn’t Special

In a practical sense, it doesn't matter whether a service goes down due to a performance bug or an attacker exploiting a security bug; the outcome to the business is lost revenue either way.

It really doesn't make sense for cybersecurity to have its own special snowflake process for things. It does not make sense operationally, philosophically, or socially.

Attackers can be clever, but often aren't – and also the reliability failures we see from "especially clever" developers/teams can foment far more harm than attackers could ever dream. Interns were destroying data long before ransomware gangs were.

The common "enemy" is unintended behavior.