A case against security nihilism