The satisfaction that comes from covering what is so categorized as advanced is scary
Many times I deal with clients that go with the extreme cases in every aspect of cyber security without covering the basics, fear is the driver of their cyber security mission

Companies that don't have unlimited budget and time and most importantly capabilities should not even think about advanced stuff because the output of such work will not be handled/understood properly and get the value of it

Most of incidents detection or prevention technologies have real ROI and are effective because they targeted the simple and common cases
Vendors and media sell fear everywhere and what I face is a reflection of that