security is a bubble because it rides on the bubble of mounting complexity brought by the self-sustaining superstructure of programmers giving themselves work by stacking "features" and rolling releases so that somewhat old versions of perfectly good working hardware become obsolete so you have to UPGRADE and buy the smartest smartphone if you want to keep running essential apps.