On the imbalance of the security problem space and its expected consequences