They typically are in big companies. "If you're able to do your job, [Security/SecOps/IT] isn't doing theirs" and all that.

It's a natural outgrowth of a corporate "efficiency" mandate that puts functional groups together vs. cross-functional groups. That pendulum is ever swinging.