I manage security and I like to phrase it as "I take security so seriously, I analyze the risk profile just like any financial analyst would and match exposure

I manage security and I like to phrase it as "I take security so seriously, I analyze the risk profile just like any financial analyst would and match exposure to client tolerance." It just turns out that most people are actually perfectly okay with periodic security breaches as long as the hassle from it is substantially below the amortized savings from less hassle in their day-to-day usage. So all of your data is protected according to that risk profile, adjusted to feedback as we get data on customer sensitivities. You know, like a professional manages assets.