For good reason - if you prioritize security above everything else, you end up building a rock, as the only system that's perfectly secure is the one that's completely useless and unusable for anything. Adding any feature, any utilitarian aspect to it, means compromising security right there and then. Security is never the goal, it's always an unpleasant cost to pay on the way to the goal.
Security management services balance confidentiality, integrity and availability. Spending more on security means you can have great availability despite the measures on integrity and confidentiality.
Look at any cloud provider. They get it right because they employ the best security management systems.
Look at any cloud provider except Microsoft. I remember three breaches where hackers got to the control plane relatively easily in the last years alone.
