I agree with you that 100% secure is not achievable.
The goal is to make your business very difficult to hack that it is no longer economically viable for terrorists to attack it in the first place.
That’s the best insurance you can give to your business.
Jean