Security control families (e.g., NIST CSF's Identify, Protect, Detect, Respond, Recover) are all layered like Maslow’s Hierarchy of Needs. The efficacy of each function can't be any better than the last layer.
I get a lot of pushy "how soon can we book a meeting?" vendor spam. Would it be rude to schedule them all for a single shared Google Meet each week?
I'm not going. But they can keep each other company...