What do you think security is mostly about? Is it about feeling safe or actually being safe?
The answer is pretty straightforward and obvious, right? If so, why then so often it seams like what's really important is a warm and fuzzy feeling that everything is fine and everyone is properly taken care of and shouldn't worry about anything? It's the same thing with a bouncer in a bar as with a big-green-button-meaning-everything-is-super-fine automatic firewall — it's all about making your customer believe that paying you ensures their safety.
And hey, if something bad happens you can always say it's been unpredictable and consequently inevitable. If you manage to get them to believe you, your marketing guys probably deserve a raise, but it's not entirely impossible, history shows.
It's sad and may sound wrong, but people don't seam to care about how something really is, instead they tend to care about how they believe it is. That's why it's important to know what you're exactly expected to provide — security or just a warm and fuzzy feeling.