Ooh, there's a trance version?

IMHO, security starts with asset management. You can't secure something you don't know about. You need to know the status of your assets so you can use the next bit - compliance baseline. The fun bit with security is that your baseline can change in a moment.

That's the truth right there. He was the first to go to these lengths

Ah, yes - I read this. Make a tenuous assumption, then use that as hard evidence to establish a fact. Rinse and repeat. Tbh, by the end I was expecting that the Chinese made a moon landing in 1422