My response to the OP about eliminating this director of security role was in regard to the need of a newspaper for that senior security role. The stories in this page of listed Pulitzer Prizes would not necessitate the level of operational security that a few independent journalists require and use every day.

The NYTimes still does journalism, and still has an important role, but the need for such a direct cybersecurity role seemed diminished (and management seemed to agree) - and would probably get in the way of less sensitive work if you had to put everything past them.

To some others in this thread, "troll," seems to have come to just mean a provocative outsider view.

What most journalists do does not require a higher degree security to achieve it, so yes, that is disappointing.