Big difference also is, sadly, one this is immediately visible and tangible versus a vague "security" diagram and document.

Noone wants to get hurt in a fire, but noone really gets "hurt" when security is compromised.