Highly recommend this new book by Spafford and co for clearing up most of the security misunderstandings [1].

[1] Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us:

https://www.oreilly.com/library/view/cybersecurity-myths-and...