“Defense‑in‑depth—layered controls like least‑privilege access, up‑to‑date patching, encryption, and multi‑factor authentication—stops the vast majority of attacks.”