Why is security considered a negative deliverable?

Question $4$ options:

A$)$

It produces only tangible benefits

B$)$

It produces no revenue or efficiency

C$)$

It costs money

D$)$

It is largely ignored

E$)$

It does not affect profits whether it is done well or poorly