> This is why security is an afterthought.

Security is always a cost center and rarely a profit center. That's the only thing that needs to be said.

Security is defence, it is never a profit center unless your business is providing security services!