Windows Phone Thoughts: Too Much Security, Too Expensive

With my most recent mobile application development projects in mind I must conclude that "mobile security" is overrated and too expensive.

Companies spend too much resources on the security aspects in their mobile solutions without considering that the chain is not stronger than its weakest link. I am not saying that security is irrelevant. I am saying that security should be implemented at the most appropriate level with regards to each specific situation and requirement. Today it is more like: implement the most strict security level all the time and everywhere regardless of what is being protected and why. This is a waste of resources.

Why invest a fortune in time and money to make the mobile solution safe as a nuclear bomb shelter using the latest biometrical products, strongest passwords and data/communication encrypted using the most complex algorithms if the information is not more vital for an outsider than your grocery list is? Or if the information is then stored and sent unencrypted across the public Internet from head quarters? If anyone really wanted to get at the information, wouldn't it be smarter to just then tap the head quarters than to go after the service technicians?

Back to basic: let real requirements decide.