>why can't you appreciate that investing in "metricsecurity" is key to protecting your company from "metricsecurity" threats?

Because if I'm a C-level or EVP-level person responsible for this type of decision, why would I want to spend money on a team of people fighting against my ability to get a big fat bonus?