Most frequently, good security is the absence of vulnerabilities. When vulnerabilities are bugs, security is software quality. A lot of other techniques are just mitigation, and the "endless billions on cybersecurity" is often security theater and optics.