Lemon products disrupt the market
Bruce Schneier has an interesting article called A Security Market for Lemons, in which he discusses how in security products, bad products are actually more likely to sell than good ones.
The super-quick version of the story is that, if buyers can't easily tell which product is best, they'll assume that all products are worth the "average value." Bad products ("lemons") reduce the overall average value, so that the best products necessarily cost more than the average and nobody's willing to buy them. So people stop making those, lowering the average further, so people stop making the next-best ones, and so on.
It's a very interesting unstable system.
ssh+2FA to all your machines, anywhere, without opening firewall ports.