Comment by AnIdiotOnTheNet

Of course security is compromised in favor of other goals, because the business doesn't exist if people can't do their jobs and produce whatever it is the business sells. Often I find that IT put too much priority on security in relation to other factors, in part because they lack the perspective to properly prioritize things.