CM, I think you are very right when you say
Layered Security. The great thing about hardware
based security is that you can 'layer' (or localize)
it. So, even if there is a breach, the damage can
be very quickly contained. Software based security
is really damaging because a single breach translates
into enormous compromise issues.
Endpoint security is critical. This is where hardware
based security reigns supreme. If one can secure the
endpoints, then one is way ahead of the security issue.
And even if an endpoint is compromised, hardware based
security can remove the compromise much faster, thereby
minimizing the damage.
hope this makes sense.