Look, no one needs to be an expert on everything, in the context of running a drug ring, being stupid means not having the roght experts for the right tasks.

If I was a drug lord I would start by hiring someone who has done it in the past.

If you approach cyber security with the mindset that it is simple and you don’t need an expert, then you are an idiot. Same as if you approached almost any subject with dire consequences if done poorly.

So yeah, if your “cyber security expert” is your computer guy who does everything, unless he is actually a cyber security expert, you are an idiot.