'Adequate' security is completely subjective, but many companies reference the Gartner quadrant to provide cover for their liability—if they bought the tools Gartner recommended, they have defensible legal position even if breached, making Gartner recommendations function as liability shields rather than security drivers.