I like the argument and it seems valid, but I have heard the opposite from people working in commercial cybersecurity.

People who work in commercial cybersecurity might have a vested interest in looking like warriors at least.