Investing in security is expensive, and it’s often tempting to focus first on your current profit