>That's like saying "what's a reasonable limit to spend on security?" You spend what's necessary.

And of course that's a universally established and uncontentious amount!