Good point about Schneier, although with a caveat: he's actually an expert in cryptography, and he has opinions about more generalized subjects in security. Quite often he's right, but I don't consider him to be an actual "security expert" in any general sense. I don't think it's actually possible; "security" is a blanket term.

Bruce is dead-on right in this case. Fighting the previous war won't prevent the next one.