You forgot to ask yourself whose interests are being secured, and who/what is the threat being secured from.

Security is not an unqualified good. It's just mechanism of control.

The users.

As the threat being secured against, yes.