Cybersecurity professionals are cogently arguing for more funding but sometimes have a biased approach towards limiting risk.