Just pay the professionals to do their work and not just for a month or two after major incident.
Last thing we might need in scrutinized security environment is some hyped director vibing their revolutionary idea. My money is on their solution being AI, again.
I doubt asking questions is being part of the problem. Making claims of authority/expert on the topic, while no providing no additional however..
Have you considered providing credible sources instead?
Might be easier for you to discern them compared to the rest of us and would be much appreciated.
This doesn't look like a good argument to me. "While you were worried about this one thing, you might view as bad, this other thing did something bad"
That still doesn't make the first one good and provides nothing to change that view. Correct me if Im wrong, but between two things perceived as bad, people are more likely to choose the devil they know.
I like the analogy with toilet paper.
Because when its bad, the very thing that was supposed to help you, got you covered in shit with no back out plan, making it that much worse.
You can also stand your ground and refuse to buy till the option is available