This security nihilism is probably the most relatable sentiment I’ve seen on HN in a while.

Is it still nihilism if you ran a proper risk assessment first?

It’s nihilism if you didn’t run a risk assessment at all because you know you’re already pwned.

What if, as a result of a risk assessment, I've learned that I'm already pwned? Nihilism or rationalism?

That’s the rationalism to nihilism pipeline in action.