With the combination of the permanent torrents of software and hardware flaws, instrinsics to their complexity (and bad strategic choices), there
is only one reasonable, honest, brutal realization:
information system security is a fantasy, it does not exist.
You can only mitigate in a best effort fashion.