> If cybersecurity was that easy, we wouldn't have so many examples of businesses getting it wrong.

There are almost no consequences for anyone working at a business that gets it wrong.

The consequences for being a nonce are quite severe so the motivation to get it right will be quite high.