You are assuming the only threats can come from outside.

Defense in depth is essential in an age of unreliable software supply chain.