Very interesting. I could add the “Streetlight” effect is usually caused by management pushing for the old “green/amber/red” type of analysis, and trying to plug holes all over the environment (whack-a-mole security)