It does not. People also think that security is doing whatever is required to drop their insurance premiums. It is not.
Most oversimplify the problem. That's why it continues to happen.
And no, having just robust security architecture doesn't solve the problem either. If you have a complex environment that you don't know how to manage, it can be just as problematic.