Indeed security is never prefect, however "its hard at it and we all suck at it" does not mean that everyone sucks at it equally.