Has anyone been able to successfully convince their execs that the takeaway from all this "Vulnpocalypse" or whatever is that architecture is actually important and to not blindly trust the claims of vendors? I've been trying unsuccessfully. The general consensus seems to be "We can fix this exposed attack surface by purchasing more attack surface."