Security is a journey, not a destination.

I'd say it's more of a race between you and those who would exploit vulnerabilities in your system or program. The more resources you commit to going faster, the longer you can stay ahead of them. Keeping in mind the costs if they catch you, and adjusting your speed accordingly :).