I think what you’re driving at is partially true: for perfect security, it takes a lot of effort and you never know when there’s a zero day for your particular practice.

However, like the other commenter is saying, it’s easy to have better security than most. Heck, it don’t even require extra ongoing maintenance to have a healthy security coverage.

But not doing anything to increase your security is a bad choice. To me, it’s kind of like eating vegetables, if the average person would just do it a little more, we would all benefit.