I have always suspected this to be the case, but it is great to see it confirmed and well-explained in detail by an almost-authority in our field.

I wonder if in the near future we'll see a similar article regarding security - "You Can't Buy Security".