Offer HN: What do you wish you knew about cybersecurity?

I'm putting together a new cybersecurity blog at donthack.me (nothing is there yet). I've been working cyber for the defense industry for a while and figured it was time to write down some of what I've learned. So what confuses people?