> Are they paid not to screw up?

Thats an interesting insight; there isn't anything inherently wrong with this. DevOps and security are two critical technical roles that work similarly: if they're doing their job right, the machine continues to run perfectly.