It doesn't do much good to point all this out. Security theater serves the interest of people who make the decisions and real, effective security does not. How do you make decision makers care about effective security? I don't know. Decision makers are almost entirely immune from the consequences of their decisions.
If you've got a young teen (or younger) (or older) with an itch to scratch, try the "Scratch" programming environment from MIT: scratch.mit.edu It's fabulous.
It doesn't do much good to point all this out. Security theater serves the interest of people who make the decisions and real, effective security does not. How do you make decision makers care about effective security? I don't know. Decision makers are almost entirely immune from the consequences of their decisions.
If you've got a young teen (or younger) (or older) with an itch to scratch, try the "Scratch" programming environment from MIT: scratch.mit.edu It's fabulous.