There is an opinion that security can be simply bought or that it is possible to stop at once reached level, which will remain for life. Unfortunately, this is far from the case. Both now and 15-20 years ago. Consider this behavioral and technological example of password selection.
