@squiggie
What a great write up. Very thought provoking. I never thought about this.
"The intention is to be secure enough but avoid overpaying for security and thereby enabling said negative externalities."
Overpaying for security is not something I ever thought about.