Security isn't a binary state. It's more layered like an onion. There are a lot of layers that even a small startup can do... that many don't.