One of the things I like most about infosec is that people in the field tend to have pretty good bullshit detectors. It's tough to prioritize what to do in security without being able to see past the everyday nonsense and chaos of us humans.