I have replied to your post here.

@Iang
I think that part of the Gordon-Loeb model is loosely aligned to your comment to “not put in security until the enemy tells you where and when”

I also think, Iang, that my reply to Adam will address some of the issues you raise

Of course security MAY translate to better revenues … but does it? I say no, in general. History is replete with examples of winners who ignored security, and losers who concentrated on security.

I postulate on why this is in a series of rants called GP, and the conclusion is … unfortunately … do not put in security until the enemy tells you where and when.

Especially, trying to sell “trust” is aligned strongly with deception, confusion, and ultimately large losses. The days are long gone when you can simply sell security on a compelling story; now, you will have to show it.