Let’s get something straight: running a vulnerability scan and calling it a “security audit” is like checking your oil and ...