It's more interesting to understand the motives of attacks. Often, attacks have a geopolitical or political motive.
So the whole point of security, digital or physical, is power.
For now, I really don't see the point of working in security for a single reason: there is NO REGULATION on measures of security when writing software. You can find millions of regulations for making physical products, but very few for software when it comes to security.
Of course, governments have higher standards, but law should mandate that insurance companies be able to evaluate cyber risks, so there should be regulations regarding computer security.