Cybersecurity has a vendor problem. Nothing is truly secure, so they aren't really selling 'security'. They're selling threat mitigation and risk minimization.