"Real security = keep it in the building"?

How on earth does that work when anyone can get dozens of GB of data past any industry-standard or even mil-spec security guy without even trying, using stuff no smarter than USB flash drives and freely available encryption/disguise software????

Sorry, but the era of physical security being sufficient as well as necessary is no longer applicable.