A consolidation wave in industrial cybersecurity and a separate SaaS integration incident both point to the same lesson: in modern security stacks, the trust boundary is often the real target.