"as Bruce Schneier has often said, security efforts focused exclusively on prevention are doomed to fail; there is a strong need for detection and mitigation efforts as well."
This is just a recurrent straw man, when Bruce is busy raging at the TSA. In reality, people do not exclusively focus on prevention.