Yes. We feel this pain all the time in the realm of security. Main problem is the incentives are backwards. You would not pay your municipality to dump garbage on your lot, you pay them to take it away. And yet IT shops go for complex gadgets that end up being as vulnerable as the thing they are intended to protect (this has been the case forever, but if you need a recent example, Evil XDR was presented in Black Hat Asia'24).
