A structural observation: the security of a system is determined by its most valuable asset, not its average asset.